§1 Information on the collection of personal data

(1) This privacy policy informs you about how we collect and process personal data when you use our website and the rights you have under the EU General Data Protection Regulation (hereafter abbreviated to "GDPR").

(2) Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(3) The controller according to Article 4(7) GDPR is

Würth Elektrogroßhandel GmbH & Co. KG
Reinhold Würth Straße 12–16
74653 Künzelsau, Germany

Tel.: +49 981 8903-0 (reception)
Fax: +49 981 8903-161 (reception)
E-mail: info@wuerth-egh.de

Executive Directors: Robert Friedmann, Joachim Kaltmeier, Ulrich Liedtke,
Uwe Schaffitzel, Kai Spahn, Peter Zürn

(4) Our data protection officer is Ms Ulrike Schröder, LL.B. Würth IT GmbH, Drillberg, 97980 Bad Mergentheim, Germany You can reach our data protection officer and the data protection coordinator at the following e-mail address: datenschutz@wuerth-egh.de

(5) We save the data you provide when you contact us by e-mail or via a contact form (your e-mail address, your name and telephone number, if applicable) to enable us to answer your questions. We delete the associated data once storage is no longer required or restrict processing if legal retention obligations apply.

(6) We provide detailed information below about the respective processes we use if we commission service providers to manage individual functions of our offering or would like to use your data for advertising purposes. We also mention the criteria for storage duration.

(7) We deploy SSL or TLS encryption for security reasons and to protect the confidential data you transmit to us when using our website, such as sending requests or placing orders. You can recognise an encrypted connection in that your browser's address bar contains "https:// rather than "http://". In this case, the "lock" icon is also displayed in the browser line. We would like to point out that complete security cannot be guaranteed when transmitting data via the Internet.

§2 Your rights

(1) You have the following rights against us in relation to your personal data:

• the right of access (Article 15 GDPR),
• the right to rectification and erasure (Articles 16 and 17 GDPR),
• the right to restriction of processing (Article 18 GDPR),
• the right to object to processing (Article 21 GDPR),
• the right to data portability (Article 20 GDPR),
• the right to complain to a supervisory authority,
• the right to withdraw your declaration of consent under data protection law.

Explanation of your rights in detail:

(2.1) The right of access
You can obtain confirmation from the controller as to whether or not your personal data is being processed. Where that is the case, you can ask the controller to give you access to the personal data and the following information:

a. the purposes of the processing;

b. the categories of personal data being processed;

c. the recipients or categories of recipient to whom your personal data has been or will be disclosed;

d. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing;

f. the existence of the right to lodge a complaint with a supervisory authority;

g. where the personal data is not collected from the data subject, any available information as to its source;

h. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information about whether your personal data is being transferred to a third country or to an international organisation. Where this is the case, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to such transfer.

(2.2) Right to rectification
Should your processed personal data be incorrect or incomplete, you have the right to obtain from the controller the rectification and/or completion of such personal data. The controller must make this rectification without undue delay.

(2.3) Right to erasure
(2.3.1) You may require the controller to delete your personal data without undue delay, and the controller is obliged to delete this data without undue delay where one of the following grounds applies:

a. the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

b. you withdraw your consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;

c. you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;

d. the personal data has been unlawfully processed;

e. the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

f. your personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

(2.3.2) Where the controller has made your personal data public and is obliged to erase it pursuant to Article 17(1) GDPR, then the controller, taking account of available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you as data subject have requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

(2.3.3) The right to erasure does not apply to the extent that processing is necessary:

a. for exercising the right of freedom of expression and information;

b. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

c. for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;

d. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

e. for the establishment, exercise or defence of legal claims.

(2.4) Right to restriction of processing
You may require the restriction of processing of your personal data, subject to the following conditions:

a. you contest the accuracy of your personal data, for a period enabling the controller to verify the accuracy of the personal data;

b. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

c. the controller no longer needs the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or

d. you have objected to processing pursuant to Article 21(1) GDPR pending verification whether the legitimate grounds of the controller override yours.

Where processing of your personal data has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained restriction of the processing pursuant to the above conditions, you must be informed by the controller before this restriction is lifted.

(2.5) Right to notification
If you have asserted the right to rectification, erasure and restriction of the processing of your data against the controller, then the controller is obliged to communicate the need for rectification or erasure of your personal data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to have the controller inform you about those recipients.

(2.6) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, where

a. the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) GDPR;

and b. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right must not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(2.7) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller may no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

(2.8) Right to withdraw your declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of your consent does not affect the legality of any processing performed based on your consent prior to such withdrawal.

(2.9) Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that concern or similarly significantly affect you. This does not apply if the decision:

a. is necessary for conclusion or performance of a contract between you and the data controller;

b. is authorised by Union or Member State law to which the controller is subject, and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or

c. is based on your explicit consent.

Such decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In the cases referred to in points (a) and (c), the data controller must implement suitable measures to safeguard your rights and freedoms and legitimate interests, which includes at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

(2.10) Right to complain to a supervisory authority
If you consider that the processing of your personal data is in breach of the GDPR, then without prejudice to any other administrative or judicial remedy you have the right to complain to a supervisory authority, in particular in the Member State in which you are resident, have your place of employment or that is the place of the alleged infringement.

A list of data protection officers and their contact details can be found at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

§3 Our legal basis for processing

(1) Point (a) of Article 6(1) GDPR serves as the legal basis where we request the data subject's consent to processing their personal data.

(2) Point (b) of Article 6(1) GDPR serves as the legal basis where the processing of personal data is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations required prior to entering into a contract.

(3) Point (c) of Article 6(1) GDPR serves as the legal basis where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject.

(4) Point (d) of Article 6(1) GDPR serves as the legal basis where the vital interests of the data subject or another natural person require the processing of personal data.

(5) Point (f) of Article 6(1) GDPR serves as the legal basis where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. The legitimate interest of our company lies in the realisation of our business activities.

(6) Reference is made to the corresponding legal basis where the collection of individual personal data is described below.

§4 The collection of personal data when you visit our website / our use of cookies

(1) We only collect the personal data that your browser sends to our server in the event that you merely use our website for informational purposes, i.e. if you do not register or otherwise provide us with information. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and to ensure stability and security (legal basis is point (f) of Article 6(1) GDPR):

• IP address
• Date and time of the request
• Content of the request (specific tab)
• Access status/ HTTP status code
• The amount of data transferred in each case
• Originating website for the request
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They send certain information to the site that sets the cookie (in this case by us). Cookies cannot run programs or transmit viruses to your computer. They are used to make our website more user-friendly and effective.

(3) Use of cookies

a) This website uses both transient cookies (see b) and persistent cookies (see c) whose scope and functionality are explained below.

b) Transient cookies are automatically deleted when you close your browser. They include especially session cookies. These store a so-called session ID, which enables various requests from your browser to be assigned to the shared session. This enables your computer to be recognised when you return to our website. Session cookies are deleted once you log out or close your browser.

c) Persistent cookies are automatically deleted after a predetermined period, which may differ depending on the cookie. You can delete cookies at any time via your browser's security settings.

d) You can configure your browser settings to suit your preferences, such as refusing to accept third-party cookies or all cookies. Please note that you may not then be able to use all the features of this website.

e) Cookies needed to execute a communication process requested by you or to provide certain functions (e.g. executing an order process) are saved based on points (b) and (f) of Article 6(1) GDPR. We notify you separately below if cookies are stored on our website to analyse your usage behaviour.

§5 Other features and offerings on our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. This will normally require you to provide additional personal data that we use to provide the respective service and to which the data processing principles above apply.

(2) We do partly use external service providers to process your data. We have carefully selected and commissioned them, they are bound by our instructions and we regularly review their performance.

(3) We may also disclose your personal data to third parties when we offer promotions or competitions, or when we conclude contracts or provide similar services jointly with partners. You will receive further information on this when you provide your personal data or within the description of the offer.

(4) Should our service providers or partners have their registered office in a country outside the European Economic Area (EEA), we will inform you about the consequences of this situation within the description of the offer.

§6 Our use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). We point out when you use our web shop that we do not use Google Analytics in the context of web shop usage.

(2) Google Analytics uses so-called "cookies", text files that are stored on your computer and enable analysis of your use of a website. Information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated the IP anonymisation function on this website. Activation of IP anonymisation on this website means that Google will beforehand truncate your IP address within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google uses the generated information to evaluate your use of the website on behalf of this website's operator, to compile reports on website activities and to provide the website operator with further services related to website use.

(3) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(4) You can prevent the use of cookies by selecting the appropriate settings on your browser, please note however that if you do this you may not be able to use the full functionality of this website. You can even prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and also prevent Google from processing this data by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

(5) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are truncated prior to further processing, so that any personal reference can be excluded. To the extent that the data collected about you does have a personal reference, this is immediately excluded, and the personal data is thus immediately deleted.

(6) We use Google Analytics to analyse the use of our website and to continuously improve it. We can use the statistics obtained to improve our offering and make it more interesting to you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

(7) The legal basis for our use of Google Analytics is point (f) of Article 6(1) GDPR. We have a concluded a corresponding contractual agreement with Google on data protection within the meaning of Article 28 GDPR.

(8) Third Party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: marketingplatform.google.com/about/analytics/terms/us/
Overview of data protection: privacy.google.com/businesses/compliance/
Google's privacy policy: https://policies.google.com/privacy?hl=en-GB&gl=uk

(9) You can prevent collection by Google Analytics by clicking on the following link. This loads an opt-out cookie which prevents future collection of your data when you visit this website: disable Google Analytics

§7 Our inclusion of YouTube videos

(1) We have included YouTube videos on our website. These are stored on www.youtube.com and can be played directly from our website. They are all included in "privacy-enhanced mode", meaning that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 below be transferred. We have no influence on this data transfer.

(2) Your visit to their website means that YouTube receives the information that you have accessed the corresponding tab on our website. The data referred to in Section 4 of this policy will also be transmitted. This happens regardless of whether YouTube provides a user account that you have used to log in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. You should log out before activating the button if you do not want any assignment with your profile on YouTube. YouTube stores your data as usage profiles and uses it for advertising, market research and/or customised design of its website. Such an evaluation is conducted (even for users who are not logged in) to provide advertising tailored to the needs of the market and to inform other users of their social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in their privacy policy. There you will also find more information about your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

§8 Our integration of Vimeo

(1) Our website uses plug-ins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. The legal basis for our use of these plug-ins is point (f) of Article 6(1) GDPR.

(2) A connection to Vimeo's servers is established when you visit one of our tabs equipped with a Vimeo plug-in. The Vimeo servers receive information about which of our tabs you have visited. Vimeo also obtains your IP address. This applies even if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transferred to Vimeo servers in the USA.

(3) When you are logged in to your Vimeo account, you enable Vimeo to directly assign your surfing behaviour to your personal profile. You can prevent this by logging out of your Vimeo account. For more information on the handling of user data, please refer to Vimeo's privacy policy at: vimeo.com/privacy.

§9 Google Fonts

(1) This website uses so-called web fonts. These are provided by Google to ensure uniform portrayal of fonts. When you access a tab, your browser loads the required web fonts into your browser cache so it can display text and fonts correctly.

(2) The browser you use must connect to Google's servers to do this. This informs Google that our website has been accessed via your IP address. The use of Google Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of point (f) of Art. 6(1) GDPR.

(3), Your computer uses a default font if your browser does not support Google Fonts.

(4) Further information on Google Fonts is available via developers.google.com/fonts/faq and Google's privacy statement: www.google.com/policies/privacy/.

END of our privacy policy
Status May 2018