Privacy Protection Policy

IPG Photonics Corporation and its European subsidiaries and affiliates (collectively, “IPG” or “we”) is a corporation headquartered in, Oxford, Massachusetts, USA. IPG values your privacy and has prepared this Privacy Protection Policy to notify you of how we collect and process your personal data when you use our site at https://www.ipgphotonics.com and https://www.ipgphotonics.com/de.

 

 

I. Name and address of the responsible person for Europe

 

IPG Laser GmbH

Carl-Benz-Straße 28

57299 Burbach

Tel.: +49(0)2736 4420 - 8100

Fax: +49(0)2736 4420 – 8160

E-Mail: ipglaser@ipgphotonics.com

Website: https://www.ipgphotonics.com/de

 

is the responsible person as defined in the EU General Data Protection Regulation (DSGVO) and the national data privacy laws.

 

       Name and address of the responsible person outside of Europe

 

IPG Photonics Corporation 50 Old Webster Road

Oxford, Massachusetts  01540

Tele:  (508) 373-1100

Fax:  (508) 373- 1101

E-Mail:  dpo@ipgphotonics.com

Website:  https://www.ipgphotonics.com/en

 

is the responsible person outside of Europe.

 

II. Name and address of the data protection officer

 

The data protection officer of the responsible person for Europe is:

 

AGOR AG

Boris Michel

Hanauer Landstr. 151-153

60314 Frankfurt am Main

Tel: +49 (0) 69 – 94 94 32 410

E-Mail: bmichel@agor-ag.com

Website: www.agor-ag.com

 

The data protection officer outside of Europe is:

 

Daniel Rathbun

Global Security Director

IPG Photonics Corporation

50 Old Webster Road

Oxford, MA  01540

Tele:  1-508-597-4759

Email:  dpo@ipgphotonics.com

Website:  https://www.ipgphotonics.com/en

 

 

III. General information about data processing

 

1. The extent personal data is processed

 

We collect and use the personal data of users of our web sites only to the extent that this is necessary for keeping our website, contents and services functioning properly.

 

Basically, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing the data by statutory provisions is permitted or when obtaining prior consent for actual reasons is not possible.

 

2. Legal basis for processing personal data

 

The legal basis for processing personal data is basically based on:

 

 

 

 

 

 

 

3. Data erasure and storage duration

 

The personal data of users will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Additional storage may be provided for by European or national legislators through EU regulations, laws or other regulations to which the responsible is subject. Blocking or deleting the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for additional storage of the data for concluding a contract or fulfilling the contract.

 

 

IV. Use of our website, general information

 

1. Description and scope of data processing

 

Every time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is collected:

 

(1) The user’s IP address

(2) anonymous geographical location (e.g. city)

(3) Information about the browser type and version used and operating system

(4) Date and time of access and duration of visiting our website

(5) Which links on our pages were clicked on by visitors

(6) Domains from which visitors come to our website

 

The described data are stored in the log files of our system. This data is not stored together with any other personal user data.

 

 

2. Purpose and legal basis for data processing

 

Our system has to temporarily store user IP addresses to allow us to deliver our website to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

 

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. This data is not evaluated for marketing purposes in this context.

 

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

 

Collecting your personal data to ensure our web presence and storing this data in log files is essential for operating our website. A contradictory possibility of the user therefore does not exist.

 

 

3. Duration of storage

 

Your data will be deleted as soon as they are no longer necessary for purposes relating to your inquiry.

 

If your data is stored in log files, it will be deleted after no longer operationally necessary.  Further storage is possible, whereby in this case, the IP addresses of the users are deleted or anonymized. This means that it is then no longer possible to identify the client who has accessed our website.

 

 

V. General information about the use of cookies

 

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When you go to a website, a cookie can be stored on your operating system. This cookie contains a characteristic string that allows the browser to be clearly when the website is accessed again.

 

We use cookies to make our homepage more user friendly. Some elements of our website require that the browser be identified even after a page break.

 

The following data is stored and transmitted:

 

(1) Language settings

(2) Log-in information

(3) Visited pages / topics on the website

 

The legal basis for processing personal data using cookies is defined in Article 6 (1) lit. f GDPR. The purpose for using technically required cookies is to simplify the use of our website.

 

We would like to point out that some functions of our website can only be offered if cookies are enabled. This applies to the following applications:

 

(1) Adopting language settings

(2) Remembering keywords

 

We do not leverage user data collected by technically required cookies to create user profiles.

 

Cookies are stored on the user’s computer, which transmits them to our web site and to third party web sites identified below. As a user, you therefore have control over the use of cookies. You can restrict or disable transmission of cookies by making changes to your Internet browser settings. Here you can also delete cookies that have been stored. Please note that you may not be able to use all the features on our website if you deactivate cookies.

 

See section IX for more information about non-essential cookies.

 

 

VI. Your rights/rights of the person concerned

 

According to the EU General Data Protection Regulation, as an affected party you have the following rights:

 

1. The right to receive information

 

You have the right to receive information from us as the person responsible are concerned regarding processing personal data involving you.

 

In addition, you may request information about the following:

 

(1)         The purpose of data processing

 

(2)         The categories of personal data that are processed

 

(3)         The recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed

 

(4)         The planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage

 

(5)         The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the person responsible or concerned, or a right to object to such processing

 

(6)         The existence of a right of appeal to a supervisory authority

 

(7)         All available information on the source of the data if the personal data are not collected from the data subject

 

(8)         The existence of automated decision-making, including profiling according to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and the intended effects of such processing on the data subject.

                                                                              

Finally, you also have the right to request information about whether your personal information is being transferred to a third country or to an international organization. In this case, you can obtain information about the appropriate guarantees in accordance with Art. 46 GDPR regarding such transfer.

 

You can claim your right to information in Europe under:  IPGL-Datenschutz @ipgphotonics.com

 

You can claim your right to information outside of Europe under:  dpo@ipgphotonics.com

 

 

2. The right to rectification

 

If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed.  The correction will be made immediately.

 

 

3. Right to restriction

 

The right to limit the processing of your personal data may be invoked in the following cases:

 

(1)         The accuracy of the personal data is contested for a period of time, enabling the person responsible to verify the accuracy of the personal data.

 

(2)         The processing is unlawful and deleting the personal data is rejected, whereby the Restriction of the use of personal data is required.

 

(3)         The person responsible no longer needs the personal data for purposes of processing, but the person concerned needs them to assert, exercise or defend legal claims, or

 

(4)         the person concerned filed an objection to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweighed those of the person concerned.

 

If processing personal data concerning you has been restricted, such data – viewed separately from your data storage – may be stored only with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or important public Interest of the Union or of a Member State.

 

If there is a processing restriction in accordance with the principles outlined, you will be informed by us before the restriction is lifted.

 

 

4. The right to delete

 

You can request that your personal data be deleted immediately if you can show the following reasons: The responsible person is obligated to delete this data immediately. These reasons include:

 

(1)         Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

 

(2)         The processing is based on a consent according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR protected and you revoke the consent. Another condition is that there is no other legal basis for the processing.

 

(3)         You object to the processing (Article 21 (1) GDPR) and there are no legitimate reasons for the processing.  Another possibility is that you have a protest against the processing pursuant to Art. 21 para. 2 GDPR.

 

(4)         The processing of your personal data is unlawful.

 

(5)         Deleting personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which those responsible are subject.

 

(6)         The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

 

If we have made personal data concerning you public and we are obligated to delete them according to Article 17 (1) of the GDPR, then we shall take appropriate measures, while also taking the available technology, implementation costs and the available technology into account, to inform data controllers who process the personal data that you, as the interested party, have requested the deletion of all links to such personal data or of copies or replications of such personal data.

 

We would like to point out that the right to delete does not exist, to the extent that processing is required:

 

(1)         To exercise the right to freedom of expression and information.

 

(2)         To fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or to exercise the official authority conferred on the controller.

 

(3)         For reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR.

 

(4)         For archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or

 

(5)       to assert, exercise or defend legal claims.

 

 

5. Right to information

 

If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients.

 

 

6. Right to data portability

 

According to the GDPR, you also have the right to obtain the personal data provided to us and to receive it in a structured, understandable and machine-readable format. Furthermore, you have the right to transfer this data to another responsible without hindrance by the person responsible for providing the personal data, provided that

 

 

                                                                                                                                   

Finally, where technically feasible and without harm to the freedoms and rights of others and as part of exercising the right of data transferability, you have the right to obtain that personal data relating to you that has been transmitted directly from one controller to another.

 

The right to data portability does not apply to processing that personal data necessary to perform a task in the public interest or to exercise the official authority that has been delegated to the controller.

 

 

7. Right to revoke the declaration of consent to data protection

 

You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation goes into effect.

 

 

8. Right to objection

 

Furthermore, for reasons based on your particular situation, you have the right at any time to file an objection to the processing of personal data relating to you, as it is defined in Art. 6 para. 1 lit. e or f GDPR. The right of objection also applies to profiling based on these provisions.

 

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.

 

If the personal data related to you are processed for advertising purposes, then you have the right to object at any time to your personal data being processed for the purpose of such advertising. This also applies to profiling, as far as it is associated with such direct marketing. Your personal data will no longer be processed for direct marketing purposes if you object to your data being used for such purposes.

 

You also have the option of discussing the use of information society services (in spite of Directive 2002/58/EC). Exercise your right to object by using automated procedures that use technical specifications.

 

 

9. Automated decision on an individual basis, including profiling

 

Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing – including profiling – which would have legal effect or would affect you in a similar manner. An exception to this principle, however, is when the decision

 

(1)         is required for the concluding or executing a contract between you and the controller,

 

(2)         and is permissible based on Union or Member State legislation to which the controller is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or

 

(3)         with your express consent.

 

If the processing is carried out in accordance with the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests.   This includes at least the right to obtain the intervention of a person on the part of the person responsible to state his own position and to contest the decision.

The ruling under (1) – (3) may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.

 

 

10. Right to complain to a supervisory authority

 

Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the location of the alleged infringement.

 

 

VII. Newsletter

1. General

 

You can subscribe to a free newsletter on our web site that we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. The data you enter in the online registration form will be sent to us.

We collect the following data based on the consent obtained during the registration process: the user’s email address. In addition, the following data will be collected:

 

 The IP address of the invoking computer, Date and time registration.

 

Your data will not be forwarded as part of data processing involved in sending newsletters. The data will be used exclusively for sending the newsletter.

 

 

2. Double opt-in and logging

 

Registration for our newsletter takes place in a so-called double-opt-in procedure. After registration, you will receive an email asking you to confirm your registration.  This confirmation is necessary so that nobody can register using external email addresses.

 

The registration for the newsletter will be logged in order to prove the registration process according to the legal requirements.  This includes the storage of the login and the time of consent, as well as the IP address.

 

 

3. Legal basis

 

Legal basis for processing the data is once the consent of the user Art. 6 para. 1 lit. a GDPR has been submitted. Collecting the user's email address aids in delivering the newsletter.

 

 

4. Cancellation, revocation and opposition

 

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your email address will therefore be saved as long as the subscription to the newsletter is active. You may terminate subscription to the newsletter at any time by revoking your consent. There is a corresponding link in each newsletter to do this.

 

We would like to further point out that at any time, you are free to cancel any future processing of your personal data in accordance with the statutory requirements, pursuant to Art. 21 GDPR. In particular, you are free to object to your data being processed for direct marketing purposes.

 

 

VIII. Electronic contact

 

You will find a contact form on our web site that you can use to contact us electronically. The data entered into the form are transmitted to us and stored. These data include [required data (*)]:

 

-        Company*

-        Branch / Industry

-        Email*

-        Message

-        First name*

-        Last name*

-        Address

-        City*

-        State/Province*

-        Country*

-        Phone

 

The following data is also stored once the message has been sent:

 

(1) The user’s IP address

(2) Date and time of registration

 

It is also possible to contact us via our provided email address. In this case, the user's personal data transmitted by email will be stored.

 

A transfer of your data to third parties will not take place in this context; this data will be used exclusively for processing the communication record.

 

The legal basis for processing the data is in submitting user consent as defined in Art. 6 para. 1 lit. a GDPR. The legal basis for processing the data transmitted in the course of sending an email is Article 6 (1) lit. f GDPR. If the email contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

Processing personal data in this context is solely for processing the contact. In the case of contact via email, this also includes the required legitimate interest in processing the data.

 

If further personal data are processed during the sending process, then they serve only to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted as soon as they are no longer necessary for purposes relating to the inquiry. Regarding the personal data from the input form on the contact form and those sent by email, this is the case when the respective conversation with the user has ended, unless you have expressed interest in receiving further communications from us. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

 

You will have the opportunity to revoke your consent to the processing of personal data at any time. Even when contacting us by email, you can object to the storage of your personal data at any time. However, we would like to point out that in such a case, the conversation cannot continue. As user from the European Union please contact: IPGL-Datenschutz@ipgphotonics.com and as user from outside the European Union please contact: dpo@ipgphotonics.com

         

All personal data stored in the course of contacting will be deleted in this case.

 

 

IX. Web analytics

 

1. Use of Google Analytics

 

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies," text files that are stored on your computer and they allow how you use the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and is stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and Internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google.

 

You can prevent the storage of cookies by enabling a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as prevent Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

 

We use Google Analytics to analyze and regularly improve the use of our website. We use the statistics to improve our offer and make it more interesting for you as a user. Google has submitted to the EU-US Privacy Shield, Framework for those exceptional cases in which personal information is transferred to the US.  The legal basis for using Google Analytics is Art. 6 Sec. 1 p. 1 lit. f GDPR.

 

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax:  +353 (1) 436 1001. User conditions:    http://www.google.com/analytics/terms/de.html, Data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, data protection policy: http://www.google.de/intl/de/policies/privacy.

 

 

2. Yandex Metrica

 

We use Yandex web analytics provided by Yandex Oy Limited Company – Moreenikatu 6, 04600 Mantsala, Finland. Yandex uses cookies, small text files placed on users’ computers to analyze user activity. The information collected by the cookies can help us to improve our website performance, but does not reveal your identity. The information will be transferred to Yandex and stored on their server in the EU and the Russian Federation. Yandex will process this information to assess how you use our website, generate reports for us on our website operation, and provide other services. You can stop using cookies by making the relevant adjustments in browser settings. You can also use the Opt-Out tool https://yandex.com/support/metrika/general/opt-out.html.

Yandex data and GDPR policies can be found here:

https://metrica.yandex.com/about/info/data-policy/

https://metrica.yandex.com/about/info/gdpr

 

The legal basis for using Yandex Metrica is Art. 6 Sec. 1 p. 1 lit. f GDPR.

 

X. Social Media

 

1. Social media presence

 

We maintain social media pages within various social networks and platforms for communicating with customers, prospects and users who are active there and for informing them about our services.

 

We would like to point out that your personal data may be processed outside the European Union, which may pose risks to you (e.g. in enforcing your rights under European/German law). Please note that some US providers are certified under the Privacy Shield and are committed to respecting EU privacy standards.

 

These users’ data are usually processed for market research and advertising purposes. Thus, e.g., user profiles are created based on the user’s behavior and interests. These usage profiles can in turn be used to do such things as place advertisements inside and outside the platforms that are allegedly in line with users' interests. For these purposes, cookies are usually stored on the user’s computer where the user’s behavior and the user’s interests are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices that the users use (this is especially true if the users are members of the respective platforms and are logged in to them).

 

The processing of the personal data of users is based on our legitimate interests in an effective user information and communication with users in accordance with. Art. 6 para. 1 lit. f. GDPR. The legal basis for processing user info is Art. 6 para. a., Art. 7 GDPR, and this entails the respective providers asking users to consent to data processing (that is, that they declare their agreement, for example, by ticking a check box or clicking on a button to confirm).

 

Additional information about processing your personal data as well as your revocation options can be found under the links of the respective providers listed below. The assertion of information and further rights of the data subjects can likewise take place opposite the offerers, who then have only the direct access to the data of the users and have appropriate information. Of course, we are available for questions and support if you need help.

 

Providers:

 

Facebook

 

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Data Privacy Policy: https://www.facebook.com/about/privacy/

Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

 

Google/ YouTube

 

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) Data Protection Policy: https://policies.google.com/privacy

Opt-Out: https://adssettings.google.com/authenticated

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

 

Xing

 

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland

 

Data Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

 

 

2. Integrating with YouTube videos

 

We have included YouTube videos in our online offering; they are stored on http://www.YouTube.com and are directly playable from our website. These are all included in the "extended privacy mode,” meaning that no data about you as a user will be transferred to YouTube if you are not playing the videos. The data mentioned in paragraph 2 will be transmitted only if you play the videos.

 

We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing or the retention periods. Click the link below to receive additional information about your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy .  Google also processes your personal data in the US and complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

 

XI. Online advertising

1. Using Google Adwords Conversion

 

(We use the offer of Google Adwords, with the help of advertising materials (Google Adwords) on external websites to attract attention to our attractive offers. We can determine how successful the individual advertising measures are in relation to the data from advertising campaigns. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting to you and to achieve a fair calculation of advertising costs.

 

(These advertising materials are supplied by Google via so-called "ad servers”.  To do this, we use ad server cookies which measure certain performance metrics such as ads or user clicks. If you reach our website via a Google ad, Google Adwords will save a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. This cookie will typically store the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant to post-view conversions), and opt-out information (a flag that the user does not want to be addressed any more).

 

The legal basis for using Google Adwords is Art. 6 Sec. 1 p. 1 lit. f GDPR.

 

 Last Updated August 7, 2019