Data privacy statement SEW-EURODRIVE GmbH & Co.

Data Protection Declaration SEW-EURODRIVE GmbH & Co. KG

SEW-EURODRIVE GmbH & Co KG (hereinafter: SEW-EURODRIVE) thanks you for visiting our website and for your interest in our products and our company. The privacy and protection of your personal data is important to us, and we take this into account in all our business processes. We therefore process your personal data by taking the applicable data protection regulations into account, in particular the requirements of the EU General Data Protection Regulation (GDPR).

On this website, we provide you with information on data processing for all processing steps at SEW-EURODRIVE. Please select in the below table for which processing step you would like to receive more detailed information. Please contact our data protection officer at datenschutz@sew-eurodrive.de if you have any questions or suggestions. The following information is available:

The "controller," as defined by Article 4, No. 7 of the GDPR is SEW-EURODRIVE GmbH & Co KG, Ernst-Blickle-Str. 42, 76646 Bruchsal, Germany, tel. +49 7251 75-0, fax +49 7251 75-1970, e-mail sew-webmaster@sew-eurodrive.de . If you have questions about how we process your personal data or about data protection in general, please contact our data protection officer at the aforementioned address or by e-mail at datenschutz@sew-eurodrive.de .

I. Personal data

II. Data protection information on using the www.sew-eurodrive.de and www.sew-eurodrive.com websites (with cookie regulations)

III. Data protection information for customers and interested parties of SEW-EURODRIVE

IV. Your rights as a person affected

I. Definition of personal data

Personal data is defined as all information that relates to an identified or identifiable natural person. This includes, for example, your name, your (business) contact details, your phone number or e-mail address and relationship to a company, and your interactions/activities with us.

When you use our website, personal data in the form of information about your use of our website, for instance, may be processed. This includes, for instance, connection data or sources accessed by you. This information is usually collected by using log files and cookies.

In the case of applications, personal data includes your name, your (business and private) contact details, your address, hobbies or information about sicknesses and your tax status (with your religious affiliation). We shall treat all information you send us, in addition to your resume, if applicable also your picture, any information about your health condition or other private information as application data.

II. Data protection information for the http://www.sew-eurodrive.de, http://www.sew-eurodrive.com & http://www.sew-eurodrive-partner.com websites

In the following, SEW-EURODRIVE, the owner of the http://www.sew-eurodrive.de, http://www.sew-eurodrive.com and http://www.sew-eurodrive-partner.com websites would like to give you an overview of how we ensure the protection of your personal data on our website and further online contact forms, and which type of personal data we process for which purposes and to which extent.

1. Data processing – Offers on our website

When you visit our website, information of a general nature is recorded automatically. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and the like. In addition, the IP address is transmitted and used to utilize the service you requested. This information is required from a technical point of view in order to correctly provide you with the requested information of websites and is mandatory when using the internet. The log file data is immediately anonymized or deleted by us. The legal basis for this is Article 6(1)(1)(f) GDPR.

If you use any services offered on our website, further personal data may be collected from you. We process this data to the extent necessary to provide the services you requested. In addition, you may create further personal data voluntarily. We describe the legal basis in the following individually presented functions and offerings. Your data be kept confidential by us and deleted or blocked within the context of the legal provisions.

If you send us an inquiry by e-mail, we collect data you provide for processing your inquiry and fulfill your requests, if applicable. The legal basis for both cases is Article 6(1)(1)(f) GDPR.

There be no further processing of your data by us or any other company beyond this purpose, with the exception of the use as described below, unless a statutory authorization applies or you have provided the corresponding consent.

If you provide us with your contact details in the context of concluding an agreement or via registration at our customer portal, please note the information on data protection mentioned under III.

2. Safety notes

We take technical and operational security measures on our websites to protect personal data stored by us against access by third parties, loss or misuse, and to enable secure data transfer.

We would like to point out that due to the structure of the internet, unintentional data access by third parties may occur. It is therefore also your responsibility to protect your data by encryption or any other method against misuse. Without the corresponding security measures, especially data that is transmitted without encryption, including by e-mail, may also be read by third parties.

3 Customer and online support

In our online support account at https://www.sew-eurodrive.de/de_de/online_support/, you have the option to interact with us comprehensively. Once you register, you will have access to many functions and services of SEW-EURODRIVE. The processing purposes and processed data can be ascertained from the individual functions, e.g. drawing up sales contracts, requesting the delivery status or carrying out troubleshooting.

The legal basis for your registration with online support is Article 6(1)(1)(b) GDPR. Please note our supplementary data protection notice under III. regarding ordering specific services and further processing of your data.

4 Advertising mailings

If you have given your consent (e.g. via the following link www.sew-eurodrive.de/consent), or if we received your contact details as part of concluding an agreement, we may send you information about products and services by e-mail. The processing takes place based on your consent; for more information on how your data is used for advertising purposes if there is a business relationship, please see below under No. III) 1) c.

You may, of course, revoke your consent to receive advertising mailings, or object to the use for advertising purposes, at any time. The simplest way to withdraw your consent is to visit this link www.sew-eurodrive.de/consent or send us an e-mail at abbestellen@sew-eurodrive.de .

5 Use of external links

Our websites contain links to other websites from other providers. SEW-EURODRIVE is not responsible for the data protection policies or the content of these other websites.

6 SEW-EURODRIVE Cookie Policy

a) General information on the use of cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your end device and that are saved by your browser. They are used to make our offerings more user-friendly, effective and secure. We use so-called temporary cookies that are automatically deleted once you close your browser ("session cookies"), as well as persistent (permanent) cookies.

You have the choice to approve that cookies are set. You can make changes in your browser settings. As a rule, you have the choice to select whether you accept all cookies, would like to be informed when cookies are set or disallow all cookies. If you choose the latter variant, you may not be able to use our offering to its full extent.

When using cookies, a distinction is made between required cookies and cookies used for additional purposes (measuring access figures, advertising purposes).

b) Cookies required when using the website

We use session cookies on our websites which are required to use our websites. This includes cookies that enable us to recognize you while you are visiting the site during a single session. These session cookies contribute to safe use of our offering by, for instance, enabling you to use the online support functions.

c) Use of cookies with your consent

Below is an overview of the cookies which we set on receiving your consent when you start using our website. An opt-out option is available for every explanation of the use. These are cookies which record user behavior on our website as well as cookies used for advertising purposes.

(1) Use of cookies to record user behavior (tracking):

The use of tracking cookies enables us to analyze how you use our website and to make improvements. We can either collect anonymous usage statistics or use functions to recognize users returning to our website and thus allocate user processes to an internally assigned ID (pseudonym). This allows us to record access to our website and to analyze it systematically.

Specifically, we use the following tracking cookies:

(a) Compiling user statistics with etracker

Services of etracker GmbH based in Hamburg, Germany ( www.etracker.com) are used on this website to analyze utilization data. In this context, cookies are used to enable a statistical analysis of the utilization of this website by its users, and to display utilization-related content or advertising. etracker cookies do not include any information that would make it possible to identify a user.

The data generated is processed and stored on our behalf by etracker exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been tested and certified by an independent institute in this respect and has been awarded the ePrivacyseal data protection quality seal.

The data is processed on the basis of the legal provisions of Article 6(1)(f) (legitimate interests) of the EU General Data Protection Regulation (GDPR). Our objective as defined by the GDPR (legitimate interests) is to analyze the use of our website and regularly optimize our online offering, as well as our web appearance in order to make it more interesting to you as a user by means of the statistical reports acquired. Since the privacy of our visitors is very important to us, any data that may allow for a reference to an individual person, such as the IP address, login and device identifications, is anonymized or pseudonymized as quickly as possible. There is no other utilization, combination with other data of etracker or dissemination to third parties.

You may object to the above data processing at any time, as far as it is related to personal data:

I object to data processing by etracker on this website here
Your Opt-out was successful!.

You can find more information about data protection at etracker here.

(b) Creation of user statistics by SEW-EURODRIVE

In addition, we use our own internally developed tool to analyze the use of our website and to enable us to improve our website regularly. With the acquired statistical reports, we are able to improve our offering and make it more interesting for you as a user. During this process, we use an anonymization function. The legal basis for the creation of these analyses is Article 6(1)(1)(f) GDPR. Within the scope of the analysis, cookies are saved on your end device. Information that has been collected in this manner is saved by us exclusively on our server in Germany.

Preventing company-related tracking so that we can also collect general data is possible if you object to tracking using the tool of SEW-EURODRIVE at the following link. If you do not want any type of analysis during use via your end device, object to tracking with the SEW-EURODRIVE tool here.
Your Opt-out was successful!

(2) Use of cookies for advertising purposes

We use cookies for marketing purposes, e.g. in order to tailor advertising to the interests of a website user. They are also used to limit the frequency with which ads are displayed and to measure the effectiveness of an ad. They record which websites and which items are clicked. This enables us to record information about user habits in order to provide interest-based advertising. The advertising networks used may share this information with third parties. In such cases, the advertising partner regularly sets the cookies directly.

Specifically, the following cookies are used for advertising purposes:

(a) Use of Google Remarketing
We use the service of Google AdWords to draw attention on external websites to our attractive products by using advertising tools (so-called Google adverts). These advertising tools are delivered by Google by means of so-called "ad servers." Ad server cookies that allow for the analysis of performance parameters are used in this process, e.g. ad impressions, clicks and conversations. This allows us to determine how successful individual advertising measures are in relation to the data of the advertising campaigns. If you access our website via a Google ad, Google AdWords will save a cookie on your end device. These cookies usually become invalid after 30 days and are not intended to identify you personally. With this cookie, the following analysis values are usually saved:

• Unique cookie ID
• Number of ad impressions per placement (frequency)
• Last impression (relevant to post-view conversions)
• Opt-out information (marking that the user no longer wants to be addressed)

These cookies allow Google to recognize your internet browser. If a user visits certain pages of a website of an AdWords customer and the cookie that has been saved on his end device has not expired, Google and the customer can detect that the user has clicked the advertisement and was forwarded to this site. Each AdWords customer is assigned a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. In the above advertising measures, our company does not collect or process any personal data itself. We are only provided with statistical analyses by Google. These analyses allow us to identify which of the deployed advertising measures are particularly effective. We do not receive any further data from the deployment of advertising measures, and, in particular, we are not able to identify users based on this information. The legal basis for processing your data is Article 6(1)(1)(a and f) GDPR.

Your browser automatically establishes a direct connection to the Google server based on the marketing tools deployed. Please note that Google may process data outside of the area of the European Union. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov. In addition, we cannot influence the extent and further processing of data that has been collected by Google deploying this tool and therefore provide information based on our current state of knowledge:

Google receives the information that you have visited the corresponding page of our website or have clicked one of our advertisements by including tracking tools. If you are registered with a Google service, Google can allocate the visit to your account. Even if you have not registered with Google or are not logged in, it is possible that the provider finds out and saves your IP address. With the company's remarketing technology, users who have already visited our website and online services and shown interest in our products will have displayed further related advertisements on other websites in the Google Partners network. You can find more information about data protection at etracker here: http://www.google.com/intl/de/policies/privacy/ and https://services.google.com/sitestats/de.html

We also use the Google Remarketing application. This is a means of retargeting in order to deliver advertisements that match interests. This application enables displaying our advertising when you are visiting other websites after visiting our website. This is accomplished with the use of cookies that are saved in your browser via which your utilization behavior is captured and analyzed by Google when you visit various websites. This enables Google to determine your previous visit to our website. According to Google, the data collected within the scope of retargeting is not combined with your personal data that may have been saved by Google. According to Google, pseudonymization is used during retargeting in particular.

If you do not wish to have advertising displayed that is targeted to your interests in the future, you can deactivate cookies in your browser or inform Google about this by going to the following link: https://www.google.com/settings/ads/onweb/. Alternatively, you may object to Google retargeting by visiting the website of the Network Advertising Initiative (NAI): http://optout.networkadvertising.org.

7 Embedded third-party services

a) Embedded YouTube videos on our website
On individual websites we have embedded YouTube videos that are saved at http://www.youtube.com and can be played back directly on our website. These videos are included in the "extended data protection mode," i.e. no data about you as a user will be transmitted to YouTube unless you not play back the videos. The below data is only transmitted when you play back the videos. We cannot influence this data transmission.

By playing back the embedded videos, YouTube receives the information that you have accessed the corresponding page on our website, and it is furthermore possible that other data is transmitted to YouTube of which we have no knowledge. This will occur regardless of whether YouTube has provided a user account through which you have logged in or if no user account exists. If you are logged into YouTube, your data will be directly allocated to your account. If you do not want this allocation to your profile with YouTube, you must log out before you activate the button. YouTube saves your data as utilization profiles and uses it for the purposes of advertisements, market research and/or the needs-compliant design of its website. Such an analysis can be carried out (even for users that are not logged in) especially for providing needs-compliant advertisements and to inform other YouTube users about your activities on our website. You have the right to object to the creation of these user profiles. Such requests must be addressed to YouTube.

Please see the data privacy statement of YouTube for further information on the purpose and extent of data collection and processing. This is also where you will find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov.

b) Google Maps

This page uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

It is necessary to store your IP address in order to use the functions of Google Maps. This information is normally sent to a Google server in the US and stored there. The provider of this page cannot influence this data transmission. If you are logged into your Google account, Google can merge the user data with other data and assign it to your account.

Google Maps is used in the interest of providing an attractive online offering and helping to easily find the locations given on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

To find out more about how your user data is processed, see the Google data protection declaration: https://www.google.de/intl/de/policies/privacy/ .

8 SEW-EURODRIVE profiles on social networks

a) Facebook fan page
For the information services offered here, we use the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. We hereby inform you that use of our Facebook page at https://www.facebook.com/sew.antriebstechnik and its functions is at your own risk. This applies, in particular, to the use of interactive functions (e.g. Comment, Share, Rate).

When you visit our Facebook page, Facebook records, among other things, your IP address as well as additional information which is found on your end device in the form of cookies. This information is used to supply us as the provider of the Facebook pages with statistical information about the use of our Facebook page (so-called Facebook “insights”). Facebook provides more information at the following link: http://de-de.facebook.com/help/pages/insights.

The data collected in this context is processed by Facebook Ltd. and may be transmitted to countries outside the European Union, in particular the US. Facebook is certified under the EU-US Privacy Shield ( www.privacyshield.gov), which corresponds to a data protection level equivalent to that in the EU.

Facebook describes which information it receives and how it uses it in general terms in its Data Use Guidelines. They also provide information about how to contact Facebook and how to change your advertising settings. The Data Use Guidelines are available at: http://de-de.facebook.com/about/privacy/. The full Facebook Data Use Policy is available here: https://de-de.facebook.com/full_data_use_policy. The following Facebook Support pages provide details on how to manage and delete existing information about you: https://de-de.facebook.com/about/privacy#

Facebook does not conclusively and clearly state, nor do we know, the extent to which Facebook uses data from your visit to the Facebook pages for its own purposes, the extent to which activities on the Facebook pages are allocated to individual users, for how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties. Data processing by Facebook may vary depending on whether you are registered with, and logged into, Facebook, or whether you access the site as a non-registered and/or not logged in user.

When you access a Facebook page, or make a contribution, the IP address allocated to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses) and deleted after 90 days. In addition, Facebook saves information about the end devices of its users (e.g. as part of the “Log-in notification” function); this may allow Facebook to allocate IP addresses to individual users. If you as a user are currently logged into Facebook, a cookie containing your Facebook ID is currently saved on your end device. This enables Facebook to track that you have visited this page and how you used it. This also applies to all other Facebook pages. With the help of Facebook buttons embedded in websites, Facebook can record your visits to these websites and allocate them to your Facebook profile. Based on this data, contents or advertising can be tailored to you.

If you want to avoid this, you should log out of Facebook or disable the “stay logged in” function, delete any cookies on your device and restart your browser. This deletes Facebook information, which can be used to identify you. You can thereby use our Facebook page without disclosing your Facebook ID. If you try to use the page's interactive functions (Like, Comment, Share, Messages, etc.), a Facebook login screen is displayed. After you log in, Facebook can again identify you as a specific user.

In addition to this, we as the provider of the information service only collect and process the data from your use of our service which you provide and which requires interaction. For example, if you ask a question which we can only answer by e-mail, we will save your information in accordance with our General Data Protection Principles, as described in our Data Protection Declaration. The legal basis for processing your data on the fan page is Article 6(1)(1)(f) GDPR.

You can contact either us or Facebook to exercise your rights as the data subject. If a party is not responsible for providing a reply, or must receive information from the other party, we or Facebook will forward the query to the relevant other party. Please contact Facebook directly for any queries concerning the setting up of your profile, the processing of your data when using the website and insights (see above for the link). If you have any questions regarding how we process your interaction with us on this site, please do not hesitate to contact us at datenschutz@sew-eurodrive.de .

If you have any questions regarding our information offering, please do not hesitate to contact us by using the above contact details. The concept underlying the offer is available at https://www.facebook.com/sew.antriebstechnik. For more information on Facebook and other social networks, and how you can protect your data, see www.youngdata.de.

b) Other sites on social media platforms

We also maintain sites on other so-called social media platforms. We also have sites with the following providers:

To provide these information services, we access the providers’ technical platform and services. We hereby inform you that use of our sites on social media platforms and their functions is at your own risk. This applies, in particular, to the use of interactive functions (e.g. Comment, Share, Rate). When you visit our pages, the social media platform providers record, among other things, your IP address as well as additional information found on your end device as cookies. This information is used to supply us as the provider of the accounts with statistical information about the interaction with us.

The details relating to Facebook described above also apply here. In particular, your data may be transmitted to the US; all of the above providers are certified under the EU US Privacy Shield ( www.privacyshield.gov) (with the exception of Xing, as this provider’s head office is in the EU). We do not know in what way the social media platforms use the data from your visit of our account and from the interaction with our contributions for their own purposes, for how long they store this data and whether they pass on the data to third parties. Data processing may vary depending on whether you are registered with, and logged into, the social network, or whether you access the site as a non-registered and/or not logged in user. When you access a contribution or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track how you surfed the internet. If you want to avoid this, you should log out, delete any cookies on your device and restart your browser.

In addition to this, we as the provider of the information service only collect and process the data from your use of our service which you provide and which requires interaction. For example, if you ask a question which we can only answer by e-mail, we will save your information in accordance with our General Data Protection Principles, as described in our Data Protection Declaration. The legal basis for processing your data on the social media platform is Article 6(1)(1)(f) GDPR.

You can contact either us or the provider of the social media platform to exercise your rights as the data subject. If a party is not responsible for providing a reply, or must receive information from the other party, we or the provider of the social media platform will forward the query to the relevant other party. Please contact the provider of the social media platform directly for any queries concerning setting up your profile or the processing of your data when using the website. If you have any questions regarding how we process your interaction with us on this site, please do not hesitate to contact us at datenschutz@sew-eurodrive.de .

In their data protection declarations, the providers describe what information the social media platform receives and how it is used (see table for the links). These also provide information about how to contact them and how to change your advertising settings. For more information on social networks and how you can protect your data, see www.youngdata.de.

III. Data protection information for customers and interested parties of SEW-EURODRIVE

1 Scope of data processing and designated uses

a) Contract performance
SEW-EURODRIVE processes the data that we receive from you as part of your inquiries or existing contractual relationships. In addition to your business contact details, this comprises all information that is exchanged, such as e-mails, orders, requests for our products, and payment details. If you have business relationships with us, you must provide the personal data that is necessary for the preparation or performance of the contracts or that we are legally required to process; otherwise we cannot fulfill the contracts.

SEW-EURODRIVE processes the data provided during order placement for use in fulfillment of the contract and may employ specialized and monitored service providers for this purpose. Processing of the data for the purpose of contract fulfillment comprises using the data to render the service stipulated by the contract, including rendering of services defined in service agreements or handling of any warranty claims. In addition, if a request for financing is made, the data required for generating a quotation may be used by SEW-EURODRIVE and, if necessary, passed on to contractual partners. Further details regarding the purposes of use can be found in the relevant contractual documents. This data processing is carried out based on Article 6(1)(1)(b) GDPR.

Data collected by SEW-EURODRIVE regarding the purchase of our products or use of our services may also be passed on to the external auditors and/or tax consultants of SEW-EURODRIVE for consulting and auditing purposes. SEW-EURODRIVE saves the data collected for fulfillment of the contract in its operative system as long as warranty claims or other purposes of use laid out in this declaration still apply. Thereafter, data that is subject to the retention obligations specified in sections 146 et seqq. German Fiscal Code or Section 257 German Commercial Code is archived and then deleted once these retention obligations expire. All other data is deleted immediately, unless this declaration specifies other designated uses for this data. Data is processed for warranty claims pursuant to Article 6(1)(1)(b) GDPR, and for the fulfillment of legal obligations pursuant to Article 6(1)(1)(c) GDPR.

b) Verifying your address and credit rating

To verify your address and credit rating, SEW-EURODRIVE accesses databases from external agencies to collect address details and credit data about your company, including data that was calculated using statistical methods (scoring). This is done as long as SEW-EURODRIVE is undertaking a commercial risk in concluding the contract and seeks to safeguard itself through this credit check. This information is used by SEW-EURODRIVE to grant trade credit for goods or services.

The following agencies provide addresses and credit data to SEW-EURODRIVE:

• Bisnode D&B Deutschland GmbH
• Deutsche Bank AG
• German Debtor's Register (Deutsches Debitorenregister, DRD), a payment records pool from the Verband der Vereine Creditreform e.V. organization
• Verband der Vereine Creditreform e.V.

The information provided by the agencies and the internal information regarding payment behavior is internally evaluated by SEW-EURODRIVE, which then creates its own rating for use as the basis for granting a credit limit. The credit data is deleted 5 years after the last delivery of goods. This mode of data processing is performed in accordance with Article 6(1)(1)(f) GDPR in order to grant you trade credit for goods and services.

c) Use of data by SEW-EURODRIVE for advertising purposes
SEW-EURODRIVE and engaged service providers (printing companies, lettershops, etc.) use your name and address as a contact person in ongoing business relationships or of interested persons for additional measures for entering into and activating business partnerships. This includes the sending of advertising by post in relation to interesting products and services, so that potential customers and business partners can become aware of products which may be of interest and in order to form a long-term business relationship. SEW-EURODRIVE uses your telephone number for promotional purposes only if you have given your consent or if consent can be reasonably presumed – for example, within an existing business relationship or after previous contact. SEW-EURODRIVE also uses your e-mail address which was obtained from the contact persons during the conclusion of contracts in order to advertise similar products and services. In all other cases, we only use your e-mail address for advertising purposes with your separate consent. Of course, you have the right to refuse these promotional contacts. We notify you of your right to object to advertising in each separate case.

Furthermore, SEW-EURODRIVE processes the data which is obtained in the course of the business relationship (contact data, products purchased, services ordered, etc.) and data which is acquired when using services (use of data when accessing the website and your voluntary information which you provide when using the site) in order to provide you with offers which are tailored to your interests. By means of the above, we use the data which is collected over the course of the business relationship and the data which is obtained when using services in order to inform you of offers, information and current developments in relation to our products and services which may be of interest. Thereby SEW-EURODRIVE provides further information concerning products and services of the EURODRIVE Group. By means of this data processing, we can showcase the products and services which we think may be of interest to you by means of personalized offers (website, e-mail or postal advertising). As a rule, your data is saved in the EU for advertising purposes. Should data be transferred to servers in the US and saved there for advertising purposes, we use engaged and monitored service providers who have agreed to guarantee the reasonableness of the level of data protection under the EU-US Privacy Shield ( https://www.privacyshield.gov/EU-US-Framework) or the standard contractual clauses of the EU Commission were agreed with these.

To achieve the goals associated with this promotional usage, we process your data over the service lives of our products and as long as you remain a customer. Exceptions are made if you consent to a longer period of usage and/or if the data is subject to statutory retention obligations. In the latter case, the data is deleted after the retention period has elapsed. The processing period may be shorter if you exercise your right to object, of which we inform you in Section V.

The legal basis for this promotional usage is Article 6(1)(1)(f) GDPR or, if you have given your consent, Article 6(1)(1)(a) GDPR. We inform you of your rights regarding promotional usage below, in particular your right to object.

d) Processing of personal data based on legal obligations
SEW-EURODRIVE, like every other company in Europe, is subject to various legal obligations to verify the data of our customers and business partners. In such cases, we process your personal data only to the extent legally required. To fulfill these legal obligations, it may be necessary to process some of your data automatically in order to evaluate personal aspects (profiling). Unless you are expressly notified, automated individual decision-making is conducted. The legal basis for this processing is Article 6(1)(1)(c) GDPR in conjunction with the applicable statutory provisions.

These statutory provisions relate to, in particular:

• Prevention of fraud and money laundering
• Tax auditing and reporting requirements
• Evaluation and management of risks in the Group
• Sanctions lists.

2 Forwarding of data within SEW-EURODRIVE Group

SEW-EURODRIVE may pass on your master data (company name, contact persons, address and contact details such as telephone number and e-mail address) to other companies within SEW-EURODRIVE Group and possibly update it to ensure that all SEW-EURODRIVE subsidiaries involved with you in a transaction (e.g. fulfilling a contract) have the same master data. This is intended to simplify our processes and may help you avoid having to provide the master data again when contacting another company within the Group. The legal basis for this mode of data processing is Article 6(1)(1)(b or f) GDPR. Your rights are safeguarded by internal contractual policies that ensure a high standard of data protection.

In addition to master data, order data may be passed on to other SEW-EURODRIVE subsidiaries if necessary for your order. For example, different SEW-EURODRIVE products are manufactured by different SEW-EURODRIVE subsidiaries, so data may need to be transferred to simplify order processing and delivery. In such cases, you will be informed of this transfer upon conclusion of the contract. The legal basis for this processing is Article 6(1)(1)(b) GDPR.

If your company is based outside Germany, an SEW-EURODRIVE subsidiary associated with us will be responsible for managing and processing your contracts or inquires. Therefore, if you wish to receive contract offers or additional information about SEW-EURODRIVE and our products, the personal information we have stored for you (in particular: name, contact details, associated company, products in which you are interested) must be transferred to the SEW-EURODRIVE subsidiary that is responsible for your company's location. This international representative of ours will use your personal data unless you object to the dissemination or saving of your data in these subsidiaries.

This may result in your master data being processed in SEW-EURODRIVE subsidiaries outside the European Union (EU) or Economic Area (EEA). In cases where the EU Commission has not specified an appropriate level of data protection, we have made contractual commitments; generally, we have concluded the EU standard contractual clauses. You can find a list of the companies belonging to the Group here. This data is subject to the same deletion policies described above.

IV. Your rights as the data subject

As a data subject, you have various rights. You can find our general contact details and the contact options of our data protection officer at the top of this website. The relevant chapters in the text of this data protection declaration describe the solution most suited to you for exercising your rights.

Every data subject is entitled to the following rights:

• Right of access (Article 15 GDPR)
• Right to rectification of incorrect data (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing of personal data (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You can object to the processing of personal data for promotional purposes – including the analysis of customer data – or the dissemination to third-parties for promotional purposes at any time without providing a reason.

Furthermore, every data subject is entitled to a general right to object (see Article 21(1) GDPR). In this case, the objection to data processing must be justified. If the data is processed with your consent, you may revoke this consent at any time with immediate future effect. Revoking your consent does not affect the legality of the data processing that occurred with your consent until the time of revocation.