Privacy Policy

ESSERT GmbH
Triwo Technopark Bruchsal - 5137a
Werner-von-Siemens-Straße 2-6
76646 Bruchsal, Germany
Phone: +49 7251 32641 00
Email: info@essert.com
Represented by: Christopher Essert

For any question about data protection, email us at info@essert.com or write to the address above, marked "Data protection".

We process personal data on the following legal bases of the General Data Protection Regulation (GDPR):
- Art. 6(1)(a) GDPR: your consent, which you can withdraw at any time with effect for the future.
- Art. 6(1)(b) GDPR: performance of a contract or steps prior to entering into a contract at your request.
- Art. 6(1)(c) GDPR: legal obligations, for example retention duties under commercial and tax law.
- Art. 6(1)(f) GDPR: our legitimate interests, which we name in each section below.

Where we store information on your device or access information stored there (for example cookies, local storage or similar technologies), we do so on the basis of Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) with your consent, unless it is strictly necessary to provide the service you requested (Section 25(2) no. 2 TDDDG).

We use service providers who process data on our behalf (processors under Art. 28 GDPR). We have concluded data processing agreements with them. Each provider is named in the sections below.

Some providers are based in the United States or use subprocessors there. Transfers to the US are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (DPF) of July 10, 2023, where the recipient is certified under the DPF. Where a recipient is not certified, we rely on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Unless a specific period is stated below, we delete personal data once it is no longer needed for the purpose for which we collected it and no statutory retention obligation applies (for example up to 6 years under Section 257 of the German Commercial Code or up to 10 years under Section 147 of the German Fiscal Code for business correspondence and accounting records).

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)). To exercise these rights, contact us at info@essert.com.

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. Where we process your data for direct marketing, you can object at any time without giving reasons.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), www.baden-wuerttemberg.datenschutz.de.

Our website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. When you visit our website, Framer automatically processes technical data in server log files: IP address, date and time of the request, page requested, referrer URL, browser type and version, and operating system. We need this data to deliver the website securely and reliably. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of our website.

According to Framer, its hosting runs on Amazon Web Services, also on servers in the US. Transfers are based on the DPF or Standard Contractual Clauses.

Framer Analytics. We use Framer's built-in analytics to measure page views, referrers and form submissions in aggregate. According to Framer, it works without cookies, and we measured no cookies or local storage entries set by it. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is understanding how our website is used.

We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to obtain and document your consent. Cookiebot stores your choice in the cookie "CookieConsent" (lifetime 12 months) and logs your consent so we can demonstrate it. According to Usercentrics, consent data is hosted on servers in the EU (Ireland). Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (duty to demonstrate consent) and Section 25(2) no. 2 TDDDG. You can change or withdraw your consent at any time via the Cookiebot icon at the bottom left of every page.

9.1 Contact form ("Talk to our team"). When you send us a request, we process your name, company, email address, region, your message and your consent confirmation. Our website builder Framer (see section 7) receives the form and forwards it to us by email. Our email runs on Microsoft 365 (Microsoft Ireland Operations Limited, Dublin, Ireland). We store requests in our internal lead management. We use your data only to answer your request and, if it leads to a project, to prepare an offer. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering business inquiries. If no business relationship results, we delete inquiry data once it is no longer needed, unless retention duties apply.

9.2 Brochure download. To download a brochure, we ask for your first and last name, company and email address. Framer forwards the form to Make (Celonis, see 9.4), which passes your data to our email service provider Kit (see 9.3). We use the data to provide the download and to send you related information about the product by email. If you also tick the newsletter box, we add you to our newsletter (9.3). Legal basis: Art. 6(1)(b) GDPR for providing the download; Art. 6(1)(a) GDPR for the newsletter.

9.3 Newsletter (Kit). To subscribe, we ask for your first and last name, company and email address. We use the double opt-in procedure: you only receive the newsletter after you confirm your subscription via the link in our confirmation email. We record the date of your consent. We send the newsletter with Kit, Inc., USA, which according to Kit is certified under the DPF. Kit records whether you open our emails and which links you click, so we can understand which content is relevant. Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email. After you unsubscribe, we may keep your email address on a blocklist so that we do not contact you again (Art. 6(1)(f) GDPR, our legitimate interest in respecting your objection).

9.4 Automation (Make). Data from our brochure and newsletter forms is transferred via Make, a service of Celonis, from Framer to Kit. Make only processes the data to transfer it.

9.5 Campaign parameters. If you reach our website via a link with campaign parameters (for example utm_source or a Google click ID "gclid"), Framer attaches these parameters to your form submission. We use them to understand which campaign led to a request. Legal basis: Art. 6(1)(f) GDPR.

9.6 Email and phone. If you contact us by email or phone, we process your details to handle your request. Legal basis and storage as in 9.1.

You can apply via the form on our careers pages. The form is provided by Tally BV, Belgium. According to Tally, form data is stored encrypted in the EU (Google Cloud, Belgium). We process your contact details, your application documents and any other information you provide, in order to decide on your application. Legal basis: Art. 6(1)(b) GDPR (steps prior to an employment contract). If we cannot offer you a position, we delete your data 6 months after the end of the application process, unless you agree to a longer storage in our talent pool (Art. 6(1)(a) GDPR, deletion after 2 years at the latest). Tally stores technical information about your form session in your browser's local storage, which is necessary to submit the form (Section 25(2) no. 2 TDDDG).

The following services are only used if you consent in the Cookiebot banner. Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

11.1 Google Tag Manager. We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to manage the tags described below. Tag Manager itself does not set cookies, but Google receives your IP address when it loads.

11.2 Google Consent Mode. We use Google Consent Mode. Before you make a choice, and if you decline, Google tags only run with consent set to "denied". In this state, Google does not set or read any cookies. Google may still receive cookieless signals, such as the consent status, the page URL, the time, your browser's user agent and whether you arrived via an ad click; your IP address is transmitted for technical reasons. Google uses these signals to model conversions in aggregate.

11.3 Google Analytics 4. We use Google Analytics 4 to understand how visitors use our website (for example pages viewed, time on page, scroll depth, clicks on email or phone links, form submissions, approximate location, device and browser). Google Analytics sets the cookies "_ga" and "_ga_<ID>" (lifetime up to 2 years). Google Analytics deletes user-level data after 14 months at the latest. Google LLC is certified under the DPF. You can find more information at https://policies.google.com/privacy.

11.4 Google Ads conversion tracking and remarketing. We use Google Ads to show ads in Google Search and on partner websites. Conversion tracking tells us whether a visitor who clicked on one of our ads later sent a request, clicked our phone number or email address, used our configurator or visited our contact page. With remarketing, we can show our ads to visitors of our website on other websites. Cookies used: "_gcl_au" (3 months), "IDE" (up to 400 days), local storage "_gcl_ls". Google LLC is certified under the DPF. You can manage personalized advertising at https://adssettings.google.com.

11.5 LinkedIn Insight Tag. We use the LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, to measure the success of our LinkedIn ads, to receive aggregated reports about the professional characteristics of our visitors (such as industry or company size) and for retargeting. LinkedIn sets cookies such as "li_gc", "bcookie" and "lidc". We do not receive any information that identifies you personally. You can object to LinkedIn retargeting at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use SalesViewer by SalesViewer GmbH, Universitätsstraße 60, 44789 Bochum, Germany, to identify which companies visit our website. SalesViewer matches the IP address of your visit with publicly available company information. According to SalesViewer, the data is pseudonymized immediately by a one-way hash and is not used to identify individual visitors. We use the results in aggregate to understand which target industries are interested in our solutions. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is learning which companies are interested in our solutions, as a basis for our sales and marketing work in the business-to-business market. You can object at any time at https://www.salesviewer.com/en/opt-out/. The opt-out stores a cookie in your browser that tells SalesViewer not to process your visits; if you delete your cookies, you need to repeat the opt-out.

We embed videos from Wistia, Inc., 120 Brookline Street, Cambridge, Massachusetts 02139, USA. Wistia is certified under the DPF according to its own statement. We use Wistia's privacy mode: according to Wistia, the player then does not track viewing sessions, sets no tracking cookies and anonymizes your IP address.

Short product loops. Some pages show short, silent product videos that start automatically and have no sound or controls. They load from Wistia together with the page, so Wistia receives your IP address and browser information for technical reasons, and the player stores playback information in your browser's local storage ("wistia", "wistia-video-progress-*"). We have switched off Wistia's viewing analytics for these videos. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is showing how our solutions work.

Videos with a play button. All other videos only load when you click play. Until then, the page shows a still image hosted by us, and no data is sent to Wistia. When you click play, Wistia receives your IP address, browser information and viewing data (for example when you start and stop the video), and the player stores playback information in your browser's local storage as described above. Legal basis: Art. 6(1)(f) GDPR and Section 25(2) no. 2 TDDDG, as you request the video yourself.

Our website links to our profiles on LinkedIn and YouTube. These are plain links: no data is transferred to these networks until you click a link.

Our website uses TLS encryption. You can recognize an encrypted connection by "https://" in your browser's address bar.

We update this policy when our website or the legal situation changes. The current version is always available on this page.