Thank you for your interest in our company – INDUSTRONIC Industrie- Electronic GmbH & Co. KG. Data protection is a priority for our management. Using the websites of INDUSTRONIC® Industrie-Electronic GmbH & Co. KG is in general possible without providing any kind of personal data. However, if a data subject wishes to take advantage of a special service of our company offered on our website, processing personal data may become necessary. Where processing is required and where no legal basis is in place for the processing, we generally obtain the data subject’s consent.

Personal data, such as the data subject’s name, address, email address or phone number, is always processed in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable for INDUSTRONIC® Industrie-Electronic GmbH & Co. KG. This Data Protection Declaration is to inform the public of the nature, extent and purpose of the personal data collected, used and processed by us. The data subjects are further instructed on their rights via this Data Protection Declaration.

In its capacity as the controller, INDUSTRONIC® Industrie-Electronic GmbH & Co. KG has implemented numerous technical and organizational measures to safeguard the personal data processed through this website as seamlessly as possible. Internet-based data transmissions may, however, in general be prone to security gaps, which is why full and complete protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data also through alternative means, e.g. by phone.

Last updated: August 2026. This Data Protection Declaration applies to www.industronic.com, including its English-language pages. Separate privacy notices may apply to dedicated portals, apps or services.

DEFINITIONS

Our Data Protection Declaration is based on the terminology used by the European legislative and regulatory authority for adopting the General Data Protection Regulation (GDPR). It is to be easy to read and understand for the public as well as for our customers and business partners. To this end, we would like to explain the following terms in advance:

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristics specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject refers to every identified or identifiable natural person whose personal data are processed by the controller responsible for the processing.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future. Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

NAME AND ADDRESS OF THE CONTROLLER

The controller within the meaning of the General Data Protection Regulation, of other data protection laws applicable in the Member States of the European Union and of other provisions relating to data protection is:

INDUSTRONIC® Industrie-Electronic GmbH & Co. KG

Carl-Jacob-Kolb-Weg 1

97877 Wertheim/Germany

Phone: +49 9342 871 0

Fax: +49 9342 871 565

Email: info@industronic.de

Web: www.industronic.de

NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The data protection officer of the controller is

Steffen Müller

INDUSTRONIC® Industrie-Electronic GmbH & Co. KG

Carl-Jacob-Kolb-Weg 1

97877 Wertheim/Germany

Phone: +49 9342 871 0

Fax: +49 9342 871 565

Email: DSB@industronic.de

Web: www.industronic.de

Every data subject may contact our data protection officer directly at any time with any questions or suggestions relating to data protection.

COOKIES

We use technically necessary cookies and comparable technologies that are required for the operation and secure provision of the website and for functions expressly requested by you. The legal basis for storing information on your terminal device or accessing information already stored on it is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data are processed in this context, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.

Optional technologies, in particular for statistics, marketing or external media, are used only after you have given your consent. The legal basis for access to your terminal device is Section 25(1) TDDDG; the legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR. You may withdraw or change your consent at any time with effect for the future via the cookie settings available on the website. The lawfulness of processing carried out before withdrawal remains unaffected. Details of the cookies and comparable technologies used, in particular the provider, purpose, retention period and category, are listed in the cookie settings.

COLLECTING GENERAL DATA AND INFORMATION

Each time the website of INDUSTRONIC Industrie-Electronic GmbH & Co. KG is accessed by a data subject or an automated system, it collects a range of general data and information. These general data and information are stored in the server log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (the referrer), (4) the sub-pages accessed by an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to avert risks in the event of attacks on our information technology systems.

We do not use these general data and information to draw conclusions about the data subject. Rather, the information is required to (1) deliver the content of our website correctly, (2) optimise the content of our website and its advertising, (3) ensure the continued functionality of our information technology systems and the technology of our website and (4) provide law-enforcement authorities with the information required for prosecution in the event of a cyberattack.

The processing of server log data is necessary to deliver the website, ensure its stability and security and detect and trace technical attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of the website. Log data are generally deleted after 14 days, unless longer retention is required to investigate a specific security incident or to establish, exercise or defend legal claims. The recipient is our hosting service provider, Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, with which we have concluded a data processing agreement.

SUBSCRIPTION TO OUR NEWSLETTER

We regularly inform our customers and business partners about company offers by means of a newsletter. Users may subscribe to our company newsletter on our website. The input forms used for this purpose show which personal data are transmitted to us when the newsletter is ordered.

Our newsletter is generally sent only if you have a valid email address and have registered for the newsletter. Where we send advertising to existing customers without separate consent, we do so exclusively under the statutory requirements of Section 7(3) of the German Act Against Unfair Competition (UWG).

For legal reasons, a confirmation email is sent as part of the double opt-in procedure to the email address first entered by a data subject for newsletter delivery. This confirmation email verifies whether the holder of the email address, as the data subject, has authorised receipt of the newsletter.

When a person subscribes to the newsletter, we also store the IP address assigned by the Internet service provider (ISP) to the computer system used by the data subject at the time of registration, together with the date and time of registration. The collection of these data is necessary to trace any possible misuse of a data subject’s email address at a later date and therefore serves our legal protection.

The personal data collected as part of a newsletter registration are used exclusively to send our newsletter. Newsletter subscribers may also be informed by email where this is necessary for the operation of the newsletter service or a related registration, for example in the event of changes to the newsletter offering or changes in technical circumstances. Each newsletter contains a link for withdrawing consent.

The newsletter is sent on the basis of your consent pursuant to Article 6(1)(a) GDPR. Registration is recorded using the double opt-in procedure. The record data serve as evidence of consent; the legal basis is Article 6(1)(f) GDPR. We use CleverReach GmbH & Co. KG, Rastede, Germany, as a processor for newsletter delivery. In particular, the email address, registration and confirmation times and IP address are processed. Newsletter usage data, such as openings and clicks, are processed only where corresponding performance measurement is actually used and valid consent has been obtained for this purpose. Newsletter data are stored until consent is withdrawn or the subscription is cancelled. Evidence data may be retained beyond that period for the duration of the applicable statutory limitation periods.

DATA PROTECTION PROVISIONS ON THE USE OF GOOGLE ANALYTICS

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies or comparable technologies to analyse use of our website and prepare reports on website activity. In particular, information about your device and browser, technical IP information, usage data and event data may be processed. The legal basis for storing information on or accessing information from your terminal device is Section 25(1) TDDDG; the legal basis for the subsequent processing is Article 6(1)(a) GDPR. Google may also process data in the United States. Where required, the transfer is based on an adequacy decision of the European Commission or appropriate safeguards pursuant to Article 46 GDPR. The retention period configured by us for user-level and event-level data is 14 months. You may withdraw your consent at any time with effect for the future via the cookie settings. Further information is available in Google’s privacy information.

DATA PROTECTION PROVISIONS ON THE USE OF LINKEDIN

Our website contains links only to our presence on LinkedIn. Merely accessing our website does not result in data being transmitted to LinkedIn through such an external link. Only when you click the link do you leave our website; any subsequent data processing is carried out by LinkedIn under its own responsibility. We do not use the LinkedIn Insight Tag or embedded LinkedIn plug-ins on this website.

DATA PROTECTION PROVISIONS ON THE USE OF YOUTUBE

We embed videos from the YouTube service on individual pages. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are loaded only after you have consented through our consent solution. No connection to YouTube is established before you give consent. When a video is loaded, in particular your IP address, device and browser information, the page accessed and usage data may be transmitted to Google. If you are signed in to a Google or YouTube account, Google may associate your use with your account. The legal basis for accessing information on your terminal device is Section 25(1) TDDDG; the legal basis for the subsequent processing is Article 6(1)(a) GDPR. Google may also process data in the United States. Where required, the transfer is based on an adequacy decision of the European Commission or appropriate safeguards pursuant to Article 46 GDPR. You may withdraw your consent at any time via the cookie settings.

CONTACTING US VIA THE WEBSITE

Due to statutory requirements, our website contains information enabling rapid electronic contact with our company and direct communication with us, including a general email address. If a data subject contacts us by email or through a contact form, the personal data transmitted by that person are stored automatically. When you contact us by email or through a contact form, we process the data you provide in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract; otherwise, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of enquiries.

If the reason for contacting us concerns products or services handled by one of our partner companies, we forward the data of the data subject to that company.

No other disclosure of these personal data to third parties takes place.

We delete the data as soon as the enquiry has been fully dealt with and no statutory retention obligations or other legitimate grounds require further storage. Where forwarding to the responsible partner company is necessary, we provide transparent information about this. In the case of recipients outside the European Economic Area, the information on international data transfers also applies.

COMMENT FUNCTION IN THE BLOG ON THE WEBSITE

We offer users the opportunity to leave individual comments on specific blog posts on the blog included on our website. A blog is a portal operated on a website and usually visible to the public, where one or several individuals called bloggers or web bloggers submit articles or thoughts in the form of so-called blog posts. The blog posts can usually be commented by third parties.

If a data subject leaves a comment on the blog published on our website, information on the time of the comment and on the user name (pseudonym) selected by the data subject is stored and published in addition to the comments left by the data subject. The IP address assigned by the data subject’s Internet service provider (ISP) is also recorded. The IP address is stored for security reasons and in case the data subject infringes on third party rights or posts illegal content in a posted comment. Such collected personal data shall not be forwarded to any third parties, unless such forwarding is dictated by law or serves our legal protection.

DATA SUBJECT RIGHTS

a) Right of confirmation

Every data subject has the right, granted by the European legislative and regulatory authority, to demand that we provide a confirmation on whether personal data concerning them are being processed. If a data subject wishes to exercise this right, they may contact our data protection officer at any time.

b) Right of access

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to obtain from us free access to the personal data concerning them and a copy thereof at any time. The European legislative and regulatory authority further grants access to the following information to the data subject:

the purposes of the processing the categories of personal data concerned the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing the right to lodge a complaint with a supervisory authority where the personal data are not collected from the data subject: any available information as to their source the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

The data subject further has a right to be informed of whether personal data were transferred to a third country or to an international organization. If this is the case, the data subject further has the right to be informed of the appropriate safeguards relating to the transfer. If a data subject wishes to exercise this right to access, they may contact our data protection officer at any time.

c) Right to rectification

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to demand the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to exercise this right to rectification, they may contact our data protection officer at any time.

d) Right to erasure (right to be forgotten)

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to have the personal data concerning them erased without undue delay where one of the following grounds applies and the processing is not necessary:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. The data subject withdraws their consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and there is no other legal ground for the processing; The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR. The personal data have been unlawfully processed. The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where one of the above reasons applies and a data subject wishes to have the personal data stored with us erased, they may contact our data protection officer at any time. The data protection officer will make sure that the request for erasure is followed without undue delay.

Where we have made the personal data public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that the data subject has requested the erasure by such other controllers of any links to, or copies or replications of, those personal data, unless such data is required for the processing. Our data protection officer will take the necessary steps required in each individual case.

e) Right to restriction of processing

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to have the personal data concerning them restricted where one of the following grounds applies:

The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data. The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead. We no longer need the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims. The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where one of the above requirements is met and a data subject wishes to have the personal data stored with us restricted, they may contact our data protection officer at any time.

f) Right to data portability

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to receive the personal data concerning them, which they have provided to us, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In exercising their right to data portability pursuant to Article 20(1) GDPR, the data subject further has the right to demand that the personal data be directly transmitted to another controller by us, where technically feasible and provided such transmission does not adversely affect the rights and freedoms of others. To assert the right to data portability, the data subject may contact our data protection officer at any time.

g) Right to object

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on those provisions

We shall no longer process the personal data in case of an objection, unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Where we process personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning them for such marketing. This includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, the data subject, on grounds relating to their particular situation, shall have the right to object to processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject may contact our data protection officer at any time.

h) Automated individual decision-making, including profiling

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller; or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or (3) is based on the data subject's explicit consent. If the decision was made (1) for entering into, or performance of, a contract between the data subject and us; or (2) is based on the data subject's explicit consent, we shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

If the data subject wishes to assert rights concerning automated decisions, they may contact our data protection officer at any time.

i) Right to withdraw consent under data protection law

Each data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authority, to withdraw a consent given for the processing of personal data at any time.

If the data subject wishes to assert their right to withdraw consent, they may contact our data protection officer at any time.

Right to lodge a complaint: Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for INDUSTRONIC is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

LEGAL BASIS OF THE PROCESSING

Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, for example processing necessary for the delivery of goods or the provision of another service or consideration, processing is based on Article 6(1)(b) GDPR. The same applies to processing operations necessary in order to take steps prior to entering into a contract, for example in the case of enquiries concerning our products or services.

Where we are subject to a legal obligation requiring the processing of personal data, for example to comply with tax obligations, processing is based on Article 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This could be the case, for example, if a visitor were injured at our premises and their name, age, health insurance details or other vital information had to be disclosed to a doctor, hospital or another third party. Processing would then be based on Article 6(1)(d) GDPR.

Finally, processing operations may be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations not covered by any of the preceding legal bases where processing is necessary for the purposes of a legitimate interest pursued by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing operations are permitted in particular because they have been specifically mentioned by the European legislature, which considered that a legitimate interest might exist where the data subject is a customer of the controller (Recital 47, sentence 2 GDPR).

LEGITIMATE INTERESTS IN THE PROCESSING PURSUED BY US OR BY A THIRD PARTY

Where the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is the conduct of our business activities for the benefit and well-being of all our employees and shareholders.

INTERNATIONAL DATA TRANSFERS

Where we use services provided by providers in connection with which a transfer of personal data to countries outside the European Economic Area cannot be excluded, the transfer takes place only if the requirements of Articles 44 et seq. GDPR are met. This may be based in particular on an adequacy decision of the European Commission, appropriate safeguards such as the EU Standard Contractual Clauses or a statutory derogation. Details are provided in the description of the respective service.

DURATION FOR WHICH PERSONAL DATA ARE STORED

We store personal data only for as long as is necessary for the respective purpose. The data are then deleted or anonymised unless statutory retention obligations, the establishment, exercise or defence of legal claims or other legally permissible grounds require longer storage. Specific retention periods are stated for the respective processing operation where possible.

This Data Protection Declaration has been prepared on the basis of the processing operations actually used and will be updated if the website or the legal situation changes.