Language

Privacy Policy & Additional Privacy Notice for California Residents (CCPA/CPRA)

The following information is intended to provide you, as a “data subject” with an overview of how we process your personal data and your rights under data protection laws.

1. Introduction

In general, use of our website requires no personal data. However, if you wish to use specific services of our company through our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, such as your name, address or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to “SIBA GmbH”. The purpose of this Privacy Policy is to inform you about the scope and purpose of the personal data we collect, use and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most seamless protection possible of the personal data processed through this website. Despite this, internet-based data transmissions can generally be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to provide us with personal data through alternative means, e.g. by phone or mail.

You can also take simple and easy-to-implement steps to protect your data from unauthorized access by third parties. Therefore, we would like to provide you with some tips on how to securely handle your data: 

  • Protect your account (login, user- or customer account) and your IT system (computer, laptop, tablet or mobile device) with robust passwords.
  • Only you should have access to these passwords.
  • Make sure you only use your passwords for a single account (login, user- or customer account).
  • Do not use one password for different websites, applications or online services.
  • The following applies in particular when using IT systems accessible to the public or shared with others: You should always log out after logging into a website, app or online service.
     

Passwords should be at least 12 characters long and specified so that they cannot be easily guessed. Therefore, they should not include common everyday words, your own name or the names of relatives, but a combination of uppercase and lowercase letters, numbers and special characters.

2. Data controller

The Data controller within the meaning of the GDPR is:
SIBA GmbH
Borker Str. 20 - 22, 44534 Lünen, Deutschland

Representative of the data controller:
Peter Werner, Managing Director Sales/Marketing

3. Data protection officer

You can contact the data protection officer as follows:
TÜV SÜD Akademie
datenschutz@siba.de

If you have questions or suggestions regarding data protection, please contact our data protection officer directly.

4. Definitions

This Privacy Policy is based on terminology used by European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.

In this Privacy Policy we use the following terms (among others):

  1. Personal data
    Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  2. Data subject
    The data subject is any identified or identifiable natural person whose personal data is processed by the data controller (our company).
  3. Processing
    Processing means any process or sequence of processed performed on personal data, whether or not by automated means, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, querying, use, disclosure by transmission, distribution, or any other form of disclosure, the matching or linking, restriction, erasure, or destruction.
  4. Restriction of processing
    Restriction of processing refers to the marking of stored personal data with the objective of limiting its future processing.
  5. Profiling
    Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or locational movements.
  6. Pseudonymization
    Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data cannot be attributed to an identified or identifiable natural person.
  7. Data processor
    A data processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
  8. Recipient
    A recipient is a natural or legal person, public authority, agency or other body to whom personal data is disclosed, regardless of whether or not they are a third party. However, public authorities that may receive personal data in the course of a specific investigation under [European] Union law or the law of the Member States are not considered recipients.
  9. Third party
    A third party is a natural or legal person, public authority, agency or other body other than the data subject, the data controller, the data processor, and the persons who, under the direct authority of the data controller or data processor, are authorized to process the personal data.
  10. Consent
    Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or other clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.
     

5. Legal basis of processing

Article 6(1)(a) of the GDPR (in conjunction with Section 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act, formerly the TTDSG)) serves as the legal basis for processing activities in which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a contractual party – as is the case for example with processing operations required for the delivery of goods or the provision of other services or consideration – the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, e.g. in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as the duty to comply with tax obligations, the processing is based on Article 6(1)(c) of the GDPR.

In rare cases the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case for example if a visitor were to be injured on our premises and we were subsequently required to disclose their name, age, health insurance information or other life-vital information to a doctor, hospital or other third parties. In that case, the processing would be based on Article 6(1)(d) of the GDPR.

Ultimately, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis applies to the processing of operations that are not covered by any of the above-specified legal bases, provided that the processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the data subject take precedence. We are permitted to conduct such processing operations in particular because they have been specifically mentioned by European legislature. In this regard, the legislature took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, Sentence 2 of the GDPR).

6. Technology

6.1 SSL/TLS encryption
This site uses SSL or TLS encryption to ensure secure data processing and to protect the transmission of confidential content such as orders, login data or contact requests that you send to us as the operator. You can identify an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

We use this technology to protect the data you send us.

6.2 Data collection when visiting the website
Data collection when visiting the website (server log files)
When you use our website for informational purposes only, i.e. if you do not register, do not otherwise actively provide us with information and do not trigger any processing operations requiring consent, we only process that data necessary for the technical provision and secure operation of the website. To this end, data is processed in server log files every time you or an automated system accesses our website.

Depending on the request, the following data in particular will be processed:

  1. website visited/page accessed (URL or resource)
  2. date and time of the access
  3. amount of data transferred (in bytes)
  4. source/referrer URL from which you accessed our website
  5. browser used (including version/user agent)
  6. operating system used
  7. IP address.

We do not combine this data with other data sources, or use it to identify you personally in connection with the server log files. 

The purposes of processing are, in particular:

  1. The delivery of the website and ensuring the stability and functionality of the systems
  2. The detection, containment, and prevention of technical malfunctions, as well as misuse and cyberattacks (IT security)
  3. Error analysis and statistical evaluation for the purpose of maintaining and developing technical operations in accordance with needs (not for promotional purposes). 
     

The IP address is anonymized promptly to protect data privacy (e.g. by truncating the last octet). Server log files are stored solely for the purpose of ensuring technical operation and preventing security incidents. The log files are automatically deleted after no more than 7 days, unless further retention is necessary in specific cases to investigate particular security incidents.

The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring that the website functions without fault and in safeguarding the integrity, confidentiality, and availability of our IT systems (in particular, the prevention and investigation of attacks and misuse).
 

7. Cookies

7.1 General information about cookies
Cookies are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone etc.) when you visit our website.

The cookie stores information that is specific to the device being used. This does not mean that we obtain direct knowledge of your identity through this.

We use cookies to make your use of our website more pleasant. For example, we use so-called session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted when you leave our website.

We also use temporary cookies to improve the user experience; these are stored on your device for a specific, predetermined period of time. If you visit our site again to use our services, the system will automatically recognize that you have visited us before and recall the information and settings you entered, so they must not be entered again.

We also use cookies to collect statistical data on the use of our website and to evaluate our services for the purpose of optimization. These cookies allow us to automatically recognize that you have previously visited our website when you return. The cookies set in this way are automatically deleted after a predetermined period of time. The storage duration of each cookie can be found in the settings of the consent tool used.

7.2 Legal basis for the use of cookies
The data processed by cookies, which is necessary for the proper functioning of the website, is therefore required to safeguard our legitimate interests and those of third parties in accordance with Article 6(1)(f) of the GDPR.

For all other cookies, you have provided your consent via our opt-in cookie banner in accordance with Article 6(1)(a) of the GDPR.

7.3 Cookiebot (Consent Management Tool)
We use the consent management tool “Cookiebot” from Usercentrix A/S, Havnegade 39, 1058 Copenhagen, Denmark. This service allows us to obtain and manage website visitors’ consent to data processing.

Cookiebot collects data generated by end users who visit our website. When an end user gives his/her consent via the cookie consent tool, Cookiebot automatically logs the following data:

  • The IP address of the end user in anonymized form (last three digits replaced with 0).
  • Date and time of consent.
  • User agent of the end user’s browser.
  • The URL from which the consent was sent.
  • An anonymous, random and encrypted key.
  • The end user’s consent status, serving as proof of consent.

The key and consent status are also stored in the “CookieConsent” cookie in the end user browser, allowing the website to automatically read and follow the end user’s consent for all subsequent page requests and future end user sessions for up to 12 months. The key is used to verify consent and to check whether the consent status stored in the end user’s browser is unchanged compared to the original consent submitted to Cybot.

The website will not correctly function without this processing. The CookieConsent cookie set by Cookiebot is classified as necessary.

Usercentrix is the recipient of your personal data and acts as a data processor for us.

For detailed information on the use of Cookiebot, see: https://www.cookiebot.com/de/privacy-policy/.
 

7.4 Cookie Declaration:

8.2 Application management / job board

On our website we post job openings that are integrated via the external applicant managing system d.vinci (www.dvinci.de).

You cannot apply through our website.

If you wish to apply for a posted position, you will be redirected to the d.vinci external applicant platform via a link.

Personal data will only be processed when you access the applicant platform and enter your information there. Your application data will be processed exclusively as part of the application process via the recruiting system used.
The company to which you are applying is responsible for processing your personal data during the application process. The data processing is conducted on the basis of Article 6(1)(b) of the GDPR and, where applicable, Section 26 BDSG, in connection with pre-contractual measures or for the purpose of conducting the application process.
 
For more information on how your personal data is processed during the application process, please refer to the privacy policy of the respective applicant platform.
 

9. Newsletter distribution

9.1  Marketing automation (Mautic)
We use the open-source software Mautic to manage newsletter subscriptions and marketing campaigns, as well as to segment contacts and deliver interest-based content. 

The data is processed for the purpose of communicating with existing customers and interested parties in the B2B sector in compliance with data protection regulations.

In this context, segmentation may involve the evaluation of interactions (profiling as defined in Article 4 of the GDPR) without automated decision-making as defined in Article 22 of the GDPR. Data processing is carried out exclusively with prior consent in accordance with Article 6(1)(a) of the GDPR, insofar as tracking or analytics mechanisms requiring consent are used.

The following measures are implemented in particular:

  • Hosting the Mautic instance with a German provider (dogado GmbH)
  • No use of external marketing platforms or SaaS services
  • Processing of business contact information only in a B2B context
  • Data collection via forms, newsletter sign-ups and CRM imports
  • Segmentation and lead scoring used only for internal marketing and sales management
  • Use of tracking technology (mtc.js) only on the basis of your prior consent via the consent management tool
  • Emails sent exclusively via the double opt-in process, with unsubscribe option at all times

To the best of our current knowledge, no data is transferred to third countries.
The legal basis for sending newsletters is Article 6(1)(a) of the GDPR and Section 7(3) of the UWG (Unfair Competition Act) for existing customers. For other processing activities carried out as part of marketing automation, Article 6(1)(f) of the GDPR applies.
Find Mautic’s official privacy policy and GDPR documentation at mautic.org. For information about the hosting provider Dogado, see Business Hosting for Your Digital Business (dogado.de). 

9.2 Newsletter distribution to existing customers
If you provided us with your email address when purchasing goods or services, we reserve the right to periodically send you offers via email for similar goods or services to the previously purchased ones. In accordance with Section 7(3) of the UWG, we are not required to obtain your separate consent for this. In this regard, data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails. You have the right to object at any time to the use of your email address for the aforementioned promotional purposes, effective for the future, by notifying the data controller specified at the beginning of this document. You will only be charged standard transmission fees for this service. Once we receive your objection, we will immediately stop using your email address for promotional purposes.

10. Our social media activities

To enable us to communicate with you on social media and keep you informed about our services, we have our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 of the GDPR.
We are not the original providers of these websites – we use them solely within the scope of the options made available to us by the respective providers.
Therefore, as a precaution, we point out that your data may also be processed outside the European Union or the European Economic Area. Using these platforms may therefore pose data protection risks for you, as it could make it more difficult to exercise your rights, such as the right to information, erasure, or objection, and because the processing carried out on social media platforms is often implemented directly by the providers for advertising purposes or to analyze user behavior, without us having any control over it. If the provider creates user profiles, cookies are often used, or your usage behavior is linked to the social media profile you created.

The processing of personal data described above is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider, in order to communicate with you in a topical manner and to inform you about our services. If you, as a user, are required to provide consent to data processing to the respective providers, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR.

Since we do not have access to the providers’ databases, we point out that the best way to exercise your rights (e.g. the right to information, rectification, erasure, etc.) is to directly contact the respective provider. We have provided further information regarding the processing of your data on social media platforms below, for each social media provider we use:

11. Social Media Plugins

11.1 Facebook plugin
We have integrated Facebook components into this website. Facebook is a social network.

A social network is an social gathering place operated online, a community that typically allows users to communicate with one another and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it can enable the internet community to share personal or business-related information. Among other things, Facebook allows users of the social network to create personal profiles, upload photos and connect to other users through friend requests.

Facebook is operated by Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject resides outside the United States or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Every time you visit one of the individual pages on this website, which is operated by us and on which a Facebook component (Facebook plugin) has been integrated, the Facebook component automatically prompts the web browser on your IT system to download a representation of the corresponding Facebook component from Facebook. For a complete overview of all Facebook plugins, see developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific subpage of our website you visit.

If you are logged into Facebook at the same time, Facebook will recognize which specific page of our website you are visiting every time you visit our website and for the entire duration of your visit. This information is collected by the Facebook component and assigned to the respective Facebook account by Facebook. If you click on one of the Facebook buttons integrated into our website, e.g. the “Like” button, or post a comment, Facebook will associate this information with your personal Facebook account and store this personal data.

Whenever you visit our website, Facebook receives a notification via the Facebook component that you have visited, provided that you are logged into Facebook at the time you access our website – this occurs regardless of whether you clicked on the Facebook component or not. If you do not wish for this information to be shared with Facebook, you can prevent this by logging out of your Facebook account before visiting our website.

This U.S. company is certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

The processing of personal data via social media buttons takes place exclusively with your express consent in accordance with Article 6(1)(a) of the GDPR.

The Data Policy published by Facebook, available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the privacy settings available on Facebook. Various applications are also available that allow you to prevent data from being sent to Facebook. You can use these applications to suppress the transmission of data to Facebook.

11.2 Instagram plugin
We have integrated Instagram components into this website. Instagram is a service that qualifies as an audiovisual platform, enabling users to share photos and videos and to repost such content on other social networks.

The company that operates Instagram is Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

Every time you visit one of the individual pages on this website, which is operated by us and on which an Instagram component (Instagram button) has been integrated, the Instagram component automatically prompts the web browser on your IT system to download a representation of the corresponding component from Instagram. As part of this technical process, Instagram receives information about which specific subpage of our website you visit.

If you are logged into Instagram at the same time, Instagram will recognize which specific page you are visiting every time you visit our website and for the entire duration of your visit. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons embedded on our website, the data and information transmitted through that button will be associated with your personal Instagram user account and stored and processed by Instagram.

Whenever you visit our website, Instagram receives a notification via the Instagram component that you have visited, provided that you are logged into Instagram at the time you access our website – this occurs regardless of whether you clicked on the Instagram component or not. If you do not wish for this information to be shared with Instagram, you can prevent this by logging out of your Instagram account before visiting our website.

This U.S. company is certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

The processing of personal data via social media buttons takes place exclusively with your express consent in accordance with Article 6(1)(a) of the GDPR.

For more information and the current Instagram privacy policy, see https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
 

11.3 LinkedIn plugin
We have integrated components of LinkedIn Corporation into this website. LinkedIn is an online social network that allows users to connect with existing business contacts and make new contacts.

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection issues outside the United States.

Every time you visit a page on our website that includes a LinkedIn component (LinkedIn plugin), that component causes the browser you are using to download a representation of the corresponding LinkedIn component. For more information about LinkedIn plugins, see developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about which specific subpage of our website you have visited.

If you are logged into LinkedIn at the same time, LinkedIn will recognize which specific page of our website you are visiting every time you visit our website and for the entire duration of your visit. This information is collected by the LinkedIn component and assigned to your LinkedIn account by LinkedIn. If you click a LinkedIn button embedded on our website, LinkedIn will associate this information with your personal LinkedIn account and store this personal data.

Whenever you visit our website, LinkedIn receives a notification via the LinkedIn component that you have visited, provided that you are logged into LinkedIn at the time you access our website – this occurs regardless of whether you clicked on the LinkedIn component or not. If you do not wish for this information to be shared with LinkedIn, you can prevent this by logging out of your LinkedIn account before visiting our website.

When processing data via LinkedIn, data may be transferred to the United States and Singapore. This U.S. company is certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures. Furthermore, the security of the transmission is regularly ensured through so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that complies with the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent will be obtained in accordance with Article 49(1)(a) of the GDPR.

The processing of personal data via social media buttons takes place exclusively with your express consent in accordance with Article 6(1)(a) of the GDPR.

At https://www.linkedin.com/psettings/guest-controls, LinkedIn allows you to opt out of email messages, text messages and targeted ads, as well as manage your ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who may set cookies. You can opt out of such cookies at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s current privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.
 

11.4 YouTube plugin
We have integrated YouTube components into this website. YouTube is an online video platform that enables video creators to upload video clips for free and enables other users to watch, rate and comment on them for free. YouTube allows users to upload all kinds of videos, which is why the platform features not only full-length movies and TV shows but also music videos, trailers and user-generated videos.

The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Every time you visit one of the individual pages on this website, which is operated by us and on which a YouTube component (YouTube plugin) has been integrated, the YouTube component automatically prompts the web browser on your IT system to download a representation of the corresponding YouTube component from YouTube. For more information about YouTube, see https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific subpage of our website you are visiting.

If you are logged in to YouTube at the same time, YouTube will recognize which specific page of our website you are visiting when you access a subpage that has a YouTube plugin. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google receive a notification via the YouTube component that you have visited our website whenever you are logged into YouTube at the time you access our website – this occurs regardless of whether you click on a YouTube video or not. If you do not wish for this information to be transmitted to YouTube and Google you can prevent this by logging out of your YouTube account before visiting our website.

We use YouTube to ensure that our website is convenient and easy to use. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

This U.S. company is certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

The processing of personal data via social media buttons takes place exclusively with your express consent in accordance with Article 6(1)(a) of the GDPR.

The privacy policy published by YouTube, available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.
 

12. Web analytics

12.1 Google Analytics 4 (GA4)
On our website we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymized user profiles are created and cookies are used (see the “Cookies” section). The information generated by the cookie regarding your use of this website may include, among others:

  • Temporary collection of the IP address without permanent storage
  • Location data
  • Browser type/version
  • Operating system used
  • Referrer URL (previously visited page)
  • Time of the server request

The pseudonymized data may be transferred by Google to a server in the United States and stored there.

The information is used to analyze website usage, compile reports on website activity and provide other services related to website- and internet usage for the purposes of market research and to design this website according to user needs. This information may also be disclosed to third parties if required by law or if third parties process this data on our behalf. 

These processing operations are conducted only upon the provision of explicit consent in accordance with Article 6(1)(a) of the GDPR. 

Google sets the default data retention period to 14 months. In addition, personal data will be retained for as long as necessary to fulfill the purpose of processing. The data is deleted as soon as it is no longer necessary to achieve the intended purpose. 

The parent company, Google LLC, is a U.S. company certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

For more information on data protection when using GA4, see https://support.google.com/analytics/answer/12017362?hl=de.
 

12.2 Google Analytics 4 (GA4) – Additional information on Consent Mode, simple implementation
Under the Digital Markets Act, Google is required to obtain users’ consent before processing user data for personalized advertising. Google complies with this requirement via its Consent Mode. Users are required to implement this and thereby demonstrate that they have obtained the consent of website visitors.

Google offers two implementation modes: simple and advanced.

We use the simple implementation method of Google Consent Mode. Only if you consent to the use of Google Analytics (see above) will a connection to Google be established, Google code be executed, and the processing described above be implemented. If you decline consent, Google will simply be notified that consent has not been granted. In that case the Google code is not executed and no Google Analytics cookies are set.

13. Plugins and other services

13.1 Google Maps
We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service that displays interactive maps to visually present geographic information. Using this service can e.g. show you our location and make it easier for you to find us.

As soon as you visit any of the subpages that have embedded a Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the United States and stored there, provided that you have given your consent within the meaning of Article 6(1)(a) of the GDPR. Google Maps also loads Google Web Fonts, Google Photos and Google Stats. The provider of these services is also Google Ireland Limited. When you visit a page that embeds Google Maps, your browser downloads the web fonts and images into your browser cache that are needed to display Google Maps. For this purpose as well, the browser you use establishes a connection to Google servers. This gives Google knowledge that our website has been accessed via your IP address. This is carried out independently of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in at Google your data are directly assigned to your account. If you do not want your profile to be linked to Google, you must sign out of your Google account. Google stores your data (even for users who are not logged in) in user profiles and analyzes it. You have the right of objection against the creation of these user profiles, and you must contact Google for the exercise of this right.

If you do not consent to your data being transmitted to Google in the future when using Google Maps, you can also completely disable the Google Maps web service by deactivating JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available.

These processing operations are conducted only upon the provision of explicit consent in accordance with Article 6(1)(a) of the GDPR.

View Google’s Conditions of Use at: https://www.google.de/intl/de/policies/terms/regional.html, and the additional Conditions of Use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.

The parent company, Google LLC, is a U.S. company certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

View the Google Maps Privacy Policy (“Google Privacy Policy”) at: https://www.google.de/intl/de/policies/privacy/.

13.2 YouTube (videos)
We have integrated YouTube components into this website. The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube is an online video platform that enables video creators to upload video clips for free and enables other users to watch, rate and comment on them for free. YouTube allows users to upload all kinds of videos, which is why the platform features not only full-length movies and TV shows but also music videos, trailers and user-generated videos. Every time you visit one of the individual pages on this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the YouTube component automatically prompts the web browser on your IT system to download a representation of the corresponding YouTube component from YouTube. Google WebFonts, Google Video and Google Photos can also be loaded from YouTube. For more information about YouTube, see www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific subpage of our website you are visiting.

If you are logged in to YouTube at the same time, YouTube will recognize which specific page of our website you are visiting when you access a subpage that has a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google receive a notification via the YouTube component that you have visited our website whenever you are logged into YouTube at the time you access our website – this occurs regardless of whether you click on a YouTube video or not. If you do not wish for this information to be transmitted to YouTube and Google you can prevent this by logging out of your YouTube account before visiting our website.

These processing operations are conducted only upon the provision of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a U.S. company certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

View the YouTube Privacy Policy at: https://www.google.de/intl/de/policies/privacy/.
 

14. Your rights as a data subject

14.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data related to you is being processed.

14.2 Right to information, Article 15 GDPR
You have the right to request, at any time and free of charge, information from us regarding the personal data we have stored about you, as well as a copy of that data in accordance with applicable laws.

14.3 Right to rectification, Article 16 GDPR
You have the right to request the correction of any inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

14.4 Erasure, Article 17 GDPR
You have the right to demand that we delete your personal data without delay, provided that one of the grounds specified by law applies and the processing or storage of such data is not necessary.

14.5 Restriction of processing, Article 18 GDPR
You have the right to demand that we restrict the processing of your personal data if one of the legal requirements is met.

14.6 Data portability, Article 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract in accordance with Article 6(1)(b) of the GDPR, and the processing is conducted by automated means, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority vested in us.
 

Furthermore, when exercising your right to data portability under Article 20(1) of the GDPR, you have the right to have your personal data transmitted directly from one controller to another, if this is technically feasible and does not adversely affect the rights and freedoms of other persons.

14.7 Objection, Article 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data conducted in accordance with Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR.
This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
In certain cases we process personal data for the purpose of direct marketing. You may object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct marketing. If you object to our processing of your personal data for direct marketing, we will no longer process your personal data for those purposes.

You also have the right to object, on grounds relating to your particular situation, to the processing of your personal data that we conduct for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task implemented in the public interest.

Despite Directive 2002/58/EC, you are free to exercise your right to object in connection with the use of services of the information society by means of automated procedures that utilize technical specifications.

14.8 Withdrawal of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time, with effect for the future.
 

14.9 Filing a complaint with a supervisory authority
You have the right to file a complaint with a supervisory authority responsible for data protection in connection with our processing of your personal data.
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
EMail: poststelle@ldi.nrw.de

15. Hosting
Our website is hosted by an external service provider (dogado GmbH, Saarlandstrasse 25, 44139 Dortmund, Germany).
Data is processed for the purpose of providing and delivering the website as well as ensuring secure and uninterrupted operation. In this context, the hosting provider automatically collects and stores information in server log files. In particular, this may include the IP address of the requesting computer, date and time of access, pages visited, and technical information about the browser and operating system used.
This data is processed on the basis of Article 6(1)(f) of the GDPR to safeguard our legitimate interest in ensuring the stable and secure provision of our online services.
We have concluded a data processing contract with the hosting provider in accordance with Article 28 of the GDPR to ensure that personal data is processed exclusively in accordance with our instructions and in compliance with the applicable data protection regulations.

16. Actuality and amendment of this Privacy Policy
This Privacy Policy is currently in effect and is dated: May 2026.
It may be necessary to amend this data protection declaration due to development of our website pages and content, or due to changed legislative or official requirements. View and print the current Privacy Policy on the website at “[www.siba-fuses.com]”.

 

Additional Privacy Notice for California Residents (CCPA/CPRA)

Additional Privacy Notice for California Residents (CCPA/CPRA)

This section supplements the general Privacy Policy for visitors and users who are residents of California. It applies only to personal information subject to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

If you are a California resident and would like to exercise your rights under the California Consumer Privacy Act (CCPA), you may submit your request by email at inside.sales@siba.de

1. Notice at Collection

At or before the point of collection, California residents are informed about the categories of personal information collected and the purposes for which such information is used.

During the preceding 12 months, we may have collected the following categories of personal information:

• Identifiers and contact data (e.g. name, email address) submitted via contact forms or communication requests.

• Internet or other electronic network activity data (e.g. IP address, browser type, device information, access timestamps, pages visited).

• Cookie and usage data collected through website technologies used to ensure functionality and analyze usage.

• Business communication data related to inquiries, orders or contractual communication.

We process this data to operate and secure the website, respond to inquiries, enable communication, manage customer relationships, and perform analytics and optimization.

2. Sources of Personal Information

Personal information is collected directly from users, automatically via website technologies, and through cookies and analytics tools.

3. Disclosure of Personal Information

Personal information may be disclosed to service providers where necessary for website operation and business processes.

This includes, in particular:

• Hosting provider: Dogado GmbH (website hosting and infrastructure).

• Marketing automation / CRM systems: Mautic (processing of contact and communication data).

Personal data is not sold to third parties. Disclosure only occurs where required for service delivery or legal compliance.

4. Sale or Sharing of Personal Information

We do not sell personal information. Where applicable, we do not share personal information for cross-context behavioral advertising within the meaning of the CCPA.

If future processing activities qualify as ‘sharing’, we will provide a legally compliant opt-out mechanism and honor valid Global Privacy Control (GPC) signals.

5. Rights of California Residents

California residents have the following rights:

• Right to Know: request information about collected data and its use.

• Right to Delete: request deletion of personal data.

• Right to Correct: request correction of inaccurate data.

• Right to Opt-Out: opt out of sale or sharing of personal data.

• Right to Limit Use of Sensitive Data (if applicable).

• Right to Non-Discrimination.

6. Exercising Your Rights

Requests can be submitted using the contact details provided in the main Privacy Policy. Requests should be clearly marked as ‘California Privacy Rights Request’.

7. Retention

Personal data is retained only as long as necessary for the purposes described in the Privacy Policy or as required by law.