CLAAS KGaA mbH (“CLAAS”) takes the protection of personal data very seriously. We want you to know what data we collect, when we collect it and how it is used. We apply a range of technical and organisational measures to ensure compliance with privacy rules, both by CLAAS itself, and by our external service providers.
All web systems under the management of CLAAS are compliant with applicable statutory provisions for data security and the protection of personal data. CLAAS takes steps to protect personal data from loss, deletion, falsification, manipulation and unauthorised access. This document contains information on how your data is collected, processed and used by CLAAS. Personal data are defined as any information that refers to an identified or identifiable natural person; a person is considered identifiable if they can be identified either directly or indirectly, in particular through association with an identifier such as a name, identity number, location or online identity, or with one or more specific characteristics that express the natural person’s physical, physiological, genetic or mental state, economic situation or social or cultural identity (hereinafter “the Data”).
The next section of the document describes the services and contact channels CLAAS uses when collecting, processing and using personal data in the context of operating the website. The purposes for which the data is processed are also explained.
The entity responsible for this website is CLAAS KGaA mbH, Mühlenwinkel 1, 33428 Harsewinkel, phone: +49 (0) 5247 12 0, email: firstname.lastname@example.org. See the legal notice for further information.
For any questions or comments on data protection, the contact details for our data protection officer are as follows:
We collect data from you when you visit our website. Our website also offers additional functions (e.g. using the contact form). When you use these functions, we collect personal data from you as listed below:
When you contact us using the contact details provided on the website or via the contact form (e.g. when you leave us a request to call you back), you provide us with data.
You can also contact us via the contact details stored on the website. In this case, we process the personal data that you provide to us in the context of making this contact. These might include:
Master data (title, surname, given name, address)
Contact details (email address, phone number)
Any other information that you disclose voluntarily
We use this information to process your enquiry or complaint. This is based on our justified interest in processing the enquiry that you have presented to us, and in following up on and dealing with complaints. In some cases, we pass on your data to third parties where this is necessary in order to process and action your enquiry; these may include the CLAAS sales partner you have requested or who is responsible for your region, or other companies in the CLAAS Group.
ii. Contact form: Arranging for a CLAAS sales partner to call you back
You can request a callback via the website. For this purpose, we communicate your callback request to CLAAS sales company, which processes your data in order to allocate you to your preferred sales partner (e.g. from past business contacts) or to the CLAAS sales partner responsible for your region. Our goal is to forward your callback request to the right person within the CLAAS sales organisation, in order to guarantee optimum sales service and provide your callback as requested. You can consult the Dealer Locator to find out which CLAAS sales partner is responsible for your region. For this purpose, we process the following personal data:
Master data (title, surname, given name, address)
Contact details (email address, phone number)
We also save the date and time of the enquiry and the IP address from which it was made.
We process data transmitted to us via the contact form solely for the purpose of answering your enquiry or responding to your request. In addition to this, you may voluntarily disclose further information to us. Required information fields are identified with an asterisk. Fields with no asterisk are voluntary. We require your address in order to identify which CLAAS sales company is responsible for you, and which CLAAS sales partner will be able to help you with your request.
In order to collect this data and transmit it to CLAAS sales company and to the CLAAS sales partner selected by you or responsible for your area, we need your consent. The legal basis for this is Art. 6(1)(1)(a) GDPR.You have the right to withdraw your consent at any time, free of charge, and without formalities. For example, you can communicate your withdrawal of consent via email to email@example.com, or through a message sent to the contact number listed above. Your withdrawal of consent does not affect the legality of data processing undertaken on the basis of the consent you had granted up until that point.If your callback request is aimed at initiating a contract, the processing of your personal data may also be subject to Art. 6(1)(1)(b) GDPR.
You can also delete saved cookies manually via your browser settings. Please note that if you reject cookies or delete necessary cookies, you may in some circumstances be unable to access our online services, or have only limited access.
i. Using the website for information purposes
If you are using our website purely for information purposes, we collect the following data:
An anonymous cookie ID which cannot be linked to your IP address
The operating system and web browser you are using and your screen resolution setting
The date and time of your visit
The websites you have visited from our site
The website from which you are visiting us
The data specified in Section 3.b.i. are processed in order to ensure that our website is functional, to carry out security analyses and to defend the website against attacks. When you enter and use the website, these data are captured automatically, and saved for a short period of time. As a basic principle, we do not save server log files together with other data. CLAAS uses log server files for statistical analysis, to analyse and remedy technical faults, to defend against attempted attacks or fraud, and to optimise the functionality of the website.
The purpose of processing this data is based on our justified interest in providing the website and ensuring its technical security. This serves in particular to identify and deal with technical faults and attacks by third parties. The legal basis for this is Art. 6(1)(1)(f) GDPR.
ii. Analysis of your user behaviour on our website.
You can also delete saved cookies manually via your browser settings. Please note that if you reject cookies or delete necessary cookies, you may in some circumstances be unable to access our online services, or have only limited access. We use the following online marketing tools to analyse your use behaviour:
This website uses Google Analytics, a web analysis service from Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer, which allow the analysis of your use of the website. Acting on instructions from CLAAS, Google will use this information to analyse your use of the website, compile reports on website activity and provide CLAAS with other services relating to use of the website and use of the internet.
CLAAS uses Google Analytics for the purpose of analysing and regularly enhancing the use of our website. The statistics obtained enable us to improve our content and make it more attractive for you as the user.
The legal basis for the use of Google Analytics is Art. 6(1)(1)(f) GDPR and Art. 15(3) of the Telemedia Act [TMG]. Our “interest” lies in improving our offering and optimising our website.
IP anonymisation and data transfer
In general, the information generated by the cookies about your use of this website is transferred to a Google server in the USA, where it is stored. On this website, CLAAS uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in an abbreviated form, making it impossible to link an IP address to a personal identity. Should any data collected about you be able to be linked to your personal identity, this information will be instantly excluded and the personal data will be deleted immediately. As part of the IP anonymisation process, your IP address will be abbreviated in advance by Google while it is still within the EU member states or other countries that are party to the European Economic Area Agreement. Only in exceptional circumstances will your full IP address be sent to a Google server in the USA before it is abbreviated. Google has its head office in the USA and is certified under the EU-US Privacy Shieldhttps://www.privacyshield.gov/EU-US-Framework
You can click on the following link to view the current certificate:https://www.privacyshield.gov/list
Under this agreement between the USA and the European Commission, the latter has determined that enterprises certified under the Privacy Shield have an adequate level of data protection. For those exceptional cases in which personal data is transferred to the USA, an adequate level of data protection is ensured by that agreement.
Deactivation of Google Analytics / objection to data collection
The IP address communicated by your browser within Google Analytics is not combined by Google with any other data. You can prevent cookies from being stored on your machine by modifying your browser settings. Please note, however, that by doing so you may not have full use of all of the website's functionality. You can also prevent the data generated by the cookie with regard to your use of the website (including your IP address) from being communicated to and processed by Google by downloading and installing the browser plug-in available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de
Further information on how user data is handled in Google Analytics can be found in the Google privacy statement:https://support.google.com/analytics/answer/6004245?hl=de
“Google Tag Manager” is a solution used to manage “website tags” via a surface (e.g. to incorporate Google Analytics and other Google marketing services into our online offering). The tag manager itself (which implements the tags) does not process any personal data belonging to the user. To find out more about the processing of personal data belonging to users, please refer to the following information (acceptable usage policy) on the Google Services Tag Manager:https://www.google.com/intl/de/tagmanager/use-policy.html
On our website, we use the “Custom Audiences” remarketing function of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”). The purpose of this function is to address targeted, interest-based advertising to website visitors via the Facebook social media network. For this purpose, the Facebook remarketing tag is implemented on the website. When you visit the website, a direct connection to the Facebook servers is created via this tag. Through this connection, Facebook receives the information that you have visited our online offering from your IP address. This enables Facebook to link the visit to our online offering to your Facebook user account – if you have one. We can use the information received in this way to display advertising via Facebook; this is also based on our justified interest pursuant to Art. 6(1)(1)(f) GDPR. Please be advised that we have no further knowledge of the content of the transferred data, nor of how Facebook uses this data. However, you can find further information in Facebook’s privacy statement available atwww.facebook.com/about/privacy/.
You have the right, on grounds relating to your individual situation, to object at any time to such processing of your personal data based on Art. 6(1)(1)(f) GDPR.If you do not wish your data to be captured by Facebook via the remarketing tag, you can deactivate the use of Facebook Custom Audience via the following link:www.facebook.com/ads/website_custom_audiences/
On our website, we use a visitor pixel and cookies from Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA for conversion tracking. This enables us to track the behaviour of visitors who have been redirected to the CLAAS website after clicking on an Outbrain ad. This process enables us to evaluate the effectiveness of the Outbrain ads for statistical and market research purposes, and can help us to optimise future advertising activities. The data collected are anonymised, i.e. we cannot link them to the user’s identity. These data are processed on the basis of Art. 15(3) TMG and Art. 6(1)(1)(f) GDPR, due to our justified interest in delivering targeted advertising and analysing the impact and effectiveness of this advertising.You have the right, on grounds relating to your individual situation, to object at any time to such processing of your personal data based on Art. 6(1)(1)(f) GDPR.The purpose and scope of the data collection and its further processing and use by Outbrain, as well as your rights in this regard and settings you can select to protect your privacy, are set out in Outbrain's privacy statement:https://www.outbrain.com/legal/privacy#privacy-policy
On our website, we use the “LinkedIn Insight Tag”, a conversion tool from the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This tool enables us to display advertising that matches your interests on other websites that you visit. For this purpose, we use a cookie in your browser that remains active for 120 days. LinkedIn provides us with anonymised data on the viewing activity, as well as information about your interaction with our website. You can find more information about privacy on LinkedIn in the LinkedIn privacy statement:https://www.linkedin.com/legal/privacy-policy. These data are processed on the basis of Art. 6(1)(1)(f) GDPR, due to our justified interest in delivering targeted advertising and analysing the impact and effectiveness of this advertising.You have the right, on grounds relating to your individual situation, to object at any time to such processing of your personal data based on Art. 6(1)(1)(f) GDPR.
In addition, you can prevent LinkedIn from capturing and processing the data relating to your use of the website generated by this cookie by implementing an opt-out cookie which will prevent any future capture of your data when you visit this website. To do this, click on the following link:Deactivate LinkedIn Insight Tag
With regard to us, you have the following rights:
a. Right to informationPursuant to Art. 15 GDPR, you have the right to obtain information about any stored personal data concerning you.
b. Right to correct your personal dataIn the event that incorrect personal data have been processed, you have the right to correct your data pursuant to Art. 16 GDPR.
c. Right to deletionIf the legal conditions are met, you may, pursuant to Art. 17 GDPR, request us to delete any personal data stored with us. This may apply if, for example: (i) the data are no longer needed for the purpose for which they were collected or otherwise processed; (ii) you have withdrawn your consent and there is no other legal basis for processing your personal data; (iii) you have lodged an objection to the processing of your data and there are no higher-priority reasons to justify the processing activity, or you object to your data being processed for the purposes of direct marketing; (iv) the data have been processed unlawfully; (v) deletion is necessary in order to meet an obligation under European Union law or under the law to which the responsible entity is subject; or (vi) the personal data were collected in the context of services offered by the information society in accordance with Art. 8(1) GDPR.
d. Right to restrict processingYou may request that the processing of your data be restricted if (i) you claim that the data are inaccurate, in which case their processing may be restricted for the period of time it takes us to check the accuracy of the data; (ii) the processing of the data is unlawful, but you have declined the option of deletion and instead request the processing of the data to be restricted; (iii) we no longer need your data, but you do need the data in order to assert, execute or defend legal claims; or (iv) you have lodged an objection to your data being processed, in which case the processing may be restricted for the period of time it takes to determine whether or not our justified reasons for the processing activity outweigh your justified interests.
e. Right to lodge an objection to the processing(1) Pursuant to Art. 21(1) GDPR, you have the right, on grounds relating to your individual situation, to object at any time to the processing of your personal data that we undertake based on our justified interest pursuant to Art. 6(1)(1)(f) GDPR. In the event that you raise an objection, we will cease to process your personal data unless we are able to demonstrate compelling legitimate reasons for the processing activity that outweigh you interests, rights and freedoms, or unless the processing is for the purpose of asserting, executing or defending legal claims. (2) In addition, pursuant to Art. 21(2) GDPR, you have the right to lodge an objection at any time, free of charge, to the profiling or direct marketing undertaken by us on the basis of our justified interest pursuant to Art. 6(1)(1)(f) GDPR. Should you raise such an objection, we will cease to process your personal data for the purposes of profiling or direct marketing.
f. Right to data portabilityPursuant to Art. 20 GDPR, you also have the right to request that the personal data provided by you be published in a structured, common, machine-readable format if: the data processing is undertaken (i) on the basis of consent or contractual agreement, and (ii) with the aid of automated processes.
If you wish to assert any of these rights, we will check whether the relevant legal conditions are met. For this purpose, we will process the personal data that are necessary in order to identify you. You also have the right to make a complaint about our processing of your personal data to a data protection authority: Landesbeauftragte für Datenschutz und Informationsfreiheit (State Authority for Data Protection), North Rhine-Westphalia, Kavalleriestrasse. 2-4, 40213 Düsseldorf, Tel.:+49 211 38424 0, Fax: +49 211 38424 10, Email:firstname.lastname@example.org.
You have the right to withdraw your consent at any time, free of charge, and without formalities. For this purpose, you will find an “unsubscribe” link in each email. You can communicate your withdrawal of consent without any formalities by simply clicking on the link provided in each newsletter email, by sending an email email@example.com by a message sent to the contact number listed above. Your withdrawal of consent does not affect the legality of data processing undertaken on the basis of the consent you had granted up until that point.
At CLAAS, access to your data is only available to those persons who need it for the purposes set out above.
If you have given us your consent to process your data for the purposes specified in the consent declaration, we will forward your data to the those parties specified in the consent declaration..In the context of making the website available, we may also pass on your data to third parties (e.g. providers of analysis tools, IT service providers, marketing agencies, call centre service providers, customer management, lettershops, marketing, website management, compliance and telecommunications). We ensure by means of data processing agreements that such third parties are under an obligation to maintain data security and treat your data as confidential.
In addition, we do not provide your data to third parties unless you have given your consent for this, or unless we are entitled or obliged to do so due to legal requirements and/or court orders or directives from an authority. To the extent that we are obliged to do so by law or on the instruction of a relevant authority, we will pass on your data to the extent necessary where this is required for the purposes of criminal prosecution, public safety measures undertaken by state police authorities, or of fulfilling the statutory duties of the state and federal authorities for the protection of the constitution, the Federal Intelligence Service, the Military Counter-Intelligence Service or the Federal Criminal Police Office in the context of preventing international terrorism or enforcing intellectual property rights.
When processing your data, CLAAS collaborates with a marketing services company (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich) (“Salesforce”); Salesforce provides software and services to CLAAS in relation to marketing services, including evaluating user behaviour and generating and analysing statistics. We ensure, by means of a data processing agreement, that Salesforce processes data solely as set out in the agreement and in accordance with our instructions, and that your data are covered by adequate technical and organisational protection. Because Salesforce sometime stores the data it processes for us on servers located outside the EU or the EEA, your data may at times be transferred to countries outside the EU or the EEA. We ensure that your data are only transferred to countries outside the EU or the EEA if it is guaranteed that the processing will be subject to a level of protection that corresponds to the applicable European data protection law. In many countries, the level of data protection has already been recognised by the EU as being in line with European data protection standards. In such cases, data can be transferred to these countries without the need to obtain a separate permit from the authorities. In addition, if your data is transferred to a third country, we ensure that it protected to a level corresponding to European data protection standards by means of agreements with Salesforce based on EU standard contractual clauses or other systems for regulating permissions (e.g. certification under the EU-US Privacy Shield) in accordance with the requirements set out in Art. 44 ff. GDPR. In the event that we forward your data to third parties outside of the scope described above (e.g. for the purpose of analysing user behaviour), we ensure that your data are only transferred to countries outside the EU or the EEA if it is guaranteed that the processing will be subject to a level of protection that corresponds to the applicable European data protection law. In many countries, the level of data protection has already been recognised by the EU as being in line with European data protection standards. In such cases, data can be transferred to these countries without the need to obtain a separate permit from the authorities.
If you use the contact form to request a callback or order a brochure, or if you contact us using the contact details provided on the website or order the newsletter through our website, we only process your data for the purposes of processing and responding to your request. After we have processed your request, your data are initially stored in case of follow-up queries and for quality assurance purposes. You may request your data to be deleted at any time; otherwise, it will be deleted once your enquiry has been dealt with in full. This is without prejudice to legal data retention requirements.
We also process your data to the extent that they are required for other lawful purposes, or if we are legally entitled to do so. In such cases, the processing is restricted, i.e. to the necessary minimum, and may not be undertaken for any other purpose. This applies, for example, to data that must be retained pursuant to commercial or tax law (Art. 147(1) of the Fiscal Code [AO], Art. 257(1) of the Commercial Code [HGB]). In general, such data must be retained for 10 years.
We do not carry out fully automated profiling or decision-making.
In order to keep our privacy statement up to date, we undertake to amend it when necessary and to the extent that is necessary. We will, of course, notify you of any changes. We do this by means of an email sent to the address provided by you, and through an automatic notice that appears the first time you log onto the website following an update to the privacy statement. Your consent is required for any changes affecting the processing of data on the basis of consent or contractual agreement. Please consult the privacy information regularly to ensure you are familiar with its contents.
This data policy will be reviewed whenever changes are made to the website or when a review is needed for other reasons.