Privacy policy

Information on the handling of personal data

We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.

Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.

Name and address of the controller

Pfeiffer Vacuum GmbH
CEO: Daniel Sälzer, Peter Zeug
Berliner Strasse 43
35614 Asslar

Name and address of the data protection officer

Henning Welz
gds – Gesellschaft für Datenschutz Mittelhessen mbH
Auf der Appeling 8
35043 Marburg-Cappel
Germany

E-mail: datenschutz@gdsm.de
Phone: 06421 / 80413-10

Actuality of the privacy policy

To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD Privacy Policy service of Cookiebox GmbH from Münster.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

Right to information

This requirement concerns in particular information on the following details of data processing:

    • Processing purposes
    • Data categories
    • Recipients or categories of recipients, if applicable
    • If applicable, the planned storage duration or the criteria for determining this duration.
    • Note on the respective right of correction, deletion, restriction or objection
    • Existence of the right to complain to a supervisory authority
    • If applicable, origin of the data (if not collected from you)
    • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
    • If applicable, (planned) transfer to a third country or international organization
Right to rectification

We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

Right to erasure (right to be forgotten)

Provided that the processing is no longer necessary and one of the following conditions is met:

    • Discontinuation of the purpose of processing
    • Withdrawal of their consent and absence of any other legal basis for processing
    • Objection to processing without an important reason to the contrary
    • Unlawful processing
    • Required to fulfill a legal obligation
    • Data collection was carried out in accordance with Art. 8 (1) GDPR
Right to restriction of processing

Provided that one of the following conditions is met:

    • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
    • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
    • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
    • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.

Data security information

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Deletion or blocking of personal data

We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

Purpose of the survey

browser types and versions usedcorrect display of the page content
Operating system used, visitor origin (referrer, e.g. Google), subpages clicked onOptimization of our website content as well as our advertising
Date and time of access to the website as well as IP address and internet service provider of the visitorEnsuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse

Other data and information for security in the event of attacks

Providing relevant information to law enforcement agencies in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:

Nature or purpose of the processing

Need

Conclusion of a sales contract (e.g. your address)Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)Compliance with legal requirements (e.g. tax regulations)

Information about specific data processing on the website

If applicable, in deviation from or in addition to the above-mentioned general information, you will find details of the individual data processing on our website below.

Contact form
Purpose of processingProcessing and, if necessary, answering the request of the form sender
Legal basis (according to Art. 6 / 9 GDPR)
  • Protection of legitimate interests (Art. 6 para. 1 f)
  • Implementation of pre-contractual measures (Art. 6 para. 1 b)
Recipient (if applicable)The data will not be passed on to third parties and/or to a third country.
If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
If known: Duration of data storageSee General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThere is no obligation.
Consequences of non-compliance (in case of failure to provide the required data)none
If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
If applicable, origin of the data (if not collected directly from the data subject)The data originates from the person concerned.
Where applicable, categories of personal data (if not collected directly from the data subject).Data and categories requested in the respective form.
Change of purpose if necessarynone
Newsletters, direct marketing

Newsletter subscription

In order to send you a newsletter, we ask for your explicit consent and agreement to this privacy policy. By giving your consent, you can subscribe to our newsletter, through which we will keep you informed about the latest offers from our portfolio. In doing so, we collect the following data:

    • Your email address
    • Country
    • Language
    • Optional: Gender, first name, surname

When you sign up to receive our newsletter, we use the so-called double opt-in procedure where necessary. This means that, once you have signed up, we will send an email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and deleted after one month. In addition, we store the email addresses you have used and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.

If the double opt-in procedure is not required, we use the single opt-in procedure. We also store the email address you provided and the time of registration.

Once you have confirmed your subscription, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(a) of the GDPR.

You can withdraw your consent to receive the newsletter at any time and unsubscribe from it. You can withdraw your consent by emailing or , or by sending a message to the contact details provided in the legal notice.

Your personal data will be deleted. For technical reasons, your email address will be retained to prevent you from receiving further newsletters from us in future.

Sending a newsletter after a product purchase

If you have purchased products from our online shop, we may send you our newsletter even if you have not previously subscribed to it. In this case, the newsletter will be sent to the email address you provided when making your purchase. These newsletters are used to promote products similar to those you have purchased in our online shop, as well as to conduct customer satisfaction surveys. For these personalised product recommendations, we select products in accordance with legal requirements based on your previous purchasing history and areas of interest, which we determine by taking into account the interests, preferences and product-related interests you have shared with us.

To this end, your email address will be stored in our newsletter mailing list. To verify the legitimacy of the newsletter dispatch, we also store the IP address you used at the time of purchase and the time of purchase.

The legal basis for the above-mentioned processing operations in connection with the sending of newsletters following a purchase is Article 6(1)(f) of the GDPR. Our legitimate interest in processing the data is the direct promotion of our products to our customers, as well as their interest in offers and promotions.

You may opt out of receiving the newsletter at any time. You can do so by clicking on the link provided in every newsletter email or by sending a message to the contact details given at the top of this privacy policy.

Newsletter Tracking

Please note that we analyse your user behaviour when sending out the newsletter. For the purposes of this analysis, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the purposes of this analysis, we link the data and web beacons mentioned in the section ‘Provision of the website and log files’ of this privacy policy with your email address and your individual ID.

The links in the newsletter also contain this ID. We use the data collected in this way to create a user profile, so that we can better tailor our newsletters to our customers’ interests. In doing so, we record when you read our newsletters and which links you click on within them, and use this information to identify your personal interests. We may link this data to actions you have taken on our website.

The legal basis for the tracking described above is your consent in accordance with Article 6(1)(a) of the GDPR, provided that you have subscribed to the newsletter.

Where the newsletter is sent following a purchase without the recipient having specifically subscribed to the newsletter or given their express consent, the legal basis for the tracking described above is Article 6(1)(f) of the GDPR. Our legitimate interest in data processing in the context of tracking is our aim to better tailor our newsletter to the interests of our customers. We only collect statistical data on the use of our website. Usage data is anonymised and pseudonymised. In the latter case, the IP address is anonymised immediately after processing and before storage. The legal basis for data processing is our legitimate interest (in the EU, Article 6(1)(f) of the GDPR).

You may object to the tracking described above at any time by unsubscribing from the newsletter; you can do so by clicking on the link provided in every newsletter email or by sending a message to the contact details set out in this privacy policy. The information obtained through tracking will be stored for as long as you remain subscribed to the newsletter. Once you have unsubscribed, we will store the data in anonymised form and exclusively for statistical purposes.

Tracking is also not possible if you have disabled the display of images by default in your email programme. In this case, the newsletter will not be displayed in full and you may not be able to use all of its features. If you choose to display the images manually, the tracking described above will take place.

We also use the data you provide when making a purchase to send you printed materials.

The processing operations referred to above, in particular the dispatch of printed materials, are carried out using the services and IT systems of various service providers whom we have appointed as our data processors.

Compliance is ensured through the conclusion of contracts in accordance with Article 28 of the GDPR and the EU Standard Contractual Clauses.

The legal basis for the processing operations described above is our legitimate interest following a purchase, in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest in processing data is to promote our products and services and to improve our customer relationships.

Cookies

We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

Customer account and product order
Purpose of the processing of general data
Data typePurpose of the survey
Salutation, title, first name, last name, street, no., postal code, city, country, date of birth (voluntary)Unique identification of the customer account, processing of the product purchase, delivery, payment transactions, processing of complaints
E-mail address, passwordAuthentication, independent password reset
Phone number (voluntary)Contact by phone
Legal basisFulfillment of a contract (Art. 6 para. 1 lit. b GDPR)
Recipient (if applicable)Parcel service provider, logistics service provider, payment service provider
If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
If known: Duration of data storageSee General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThe data (in the mandatory fields) must be provided as part of the underlying contract.
Consequences of non-compliance (in case of failure to provide the required data)The creation of a customer account is not possible in this case.
If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
If applicable, origin of the data (if not collected directly from the data subject)The data comes from the data subject himself.
Where applicable, categories of personal data (if not collected directly from the data subject).The data comes from the data subject himself.
Change of purpose if necessarynone
Web tracking technologies - managed with Usercentrics

To manage all cookies, website and tracking technologies that require consent or opt-out in a privacy-compliant manner, we use the Consent Management Platform of Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which we have integrated the following services: