Website visit

Information about our company and the services we offer can be found at www.seb-professional.com, including the associated sub-domains and sub-pages. When you visit our website, your personal data may be processed.

We would like to point out that it is entirely up to you whether you wish to share your data with us. However, if and to the extent that you do not provide us with the data required for a particular service, you will not be able to use the respective service, or at least not to its full extent. We use the data exclusively to provide you with the service you have requested.

A) Purpose of the processing

We create the content of our websites with Storyblok, host them with AWS and deliver them with the help of Cloudflare's CDN. Usage data is collected in the process. The temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems.

B) Scope of the processing

We may collect, store and process the following categories of personal data when you use the website for information purposes or access its content:

• Date and time of access

• IP address

• Host name of the accessing computer

• Website from which the website was accessed

• Websites accessed via the website

• Visited page on our website

• Protocols and status code

• Amount of data transferred

• Information about the browser type and version used

• Operating system

• UserAgent

• Protocol data (directory protection user, referrer, host name accessed)

The IP addresses are stored anonymously. All user data is removed during anonymization.

C) Legal basis

The data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest).

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The anonymized IP addresses are stored for 60 days. Information on the directory protection user used is anonymized after one day. Error logs, which record incorrect page views, are deleted after seven days. Access via FTP is logged with anonymized information on the user name and IP address and stored for 60 days.

E) Recipients of the data

We use various services to provide the websites, which are therefore recipients of the data.

Amazon Web Services (AWS)
We use Amazon Web Services (AWS) as the hosting provider for our websites.

• Registered office: Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg

• Website: https://aws.amazon.com/

• Data protection information: https://aws.amazon.com/privacy/

• Information on compliance with the GDPR: https://aws.amazon.com/compliance/gdpr-center/

Cloudflare
We use Cloudflare's global cloud platform as a Cloud Delivery Network (CDN) and Web Application Firewall (WAF). This makes the website more secure while improving the performance and reliability of its critical internet properties.

• Registered office: Cloudflare Inc, 101 Townsend St San Francisco, CA, 94107, USA

• Data protection information: https://www.cloudflare.com/privacypolicy/

• Cookie information: https://www.cloudflare.com/cookie-policy/

Storyblok
We use the SaaS-based Storyblok and its affiliates' SaaS-based headless content management system (including the Storyblok APIs and documentation) and the Digital Experience Platform (DXP) with a visual editor to upload, manage and publish content using the Storyblok APIs.

• Registered office: Storyblok Solutions GmbH, FN 608512x, ATU79663909, Loquaiplatz 12/1, 1060 Vienna, Austria

• Data protection information: https://www.storyblok.com/legal/privacy-policy

A) Purpose of the processing

We use the consent management tool from OneTrust to manage your consent to the processing of personal data on our website. The consent management tool is used for the purpose of:

• Managing and documenting your consent to data processing

• Compliance with the legal requirements of the General Data Protection Regulation (GDPR)

• Ensuring transparent and comprehensible data processing

• Optimizing the user experience on our website

B) Scope of the processing

The following data is processed:

• Information on consent (yes/no)

• Time of the consent

• IP address

• Browser information

• Device information

• Websites visited

C) Legal basis

We process this data on the basis of Article 6(1)(f) GDPR (legitimate interest).

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

E) Recipients of the data

The data collected is passed on to our service provider OneTrust, which supports us in managing the consents. OneTrust receives the above-mentioned data as a processor.

• Registered office: OneTrust LLC1200 Abernathy Rd, Suite 600, Atlanta, Georgia 30328, USA

• Website: https://www.onetrust.com

• Data protection information: https://www.onetrust.com/privacy-notice/

A) Purpose of the processing

The purpose of the processing is to enable you to contact us if you have any questions about our products and services so that we can provide you with assistance if necessary and make you offers for our products.

B) Scope of the processing

When you use the contact form, the categories of data transmitted are processed:

• Personal & contact data

• Address data

• order & product data, if applicable

• and the time of transmission

• as well as any voluntarily provided data on location and telephone data

C) Legal basis

We process this data on the basis of Article 6(1)(b) to initiate or fulfill a contract.

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the contact form, this is usually the case after it has been sent to us. However, it may be stored for up to ten years due to legal obligations. As a rule, the storage period is three years.

The mail logs for sending e-mails from the web environment are anonymized after one day and then stored for 60 days. Mail logs for sending via our mail server are deleted after four weeks. The retention period is necessary to ensure the functionality of the mail services and to combat spam.

E) Recipients of the data

Cloudflare Turnstile
Mechanisms are integrated into the forms on the website to prevent us from receiving spam requests. We use the Turnstile service from the provider Cloudflare for this purpose. The spam protection is either visible as a captcha or happens in the background without user interaction. Turnstile receives the above-mentioned data as a processor.

• Registered office: Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA

• Website: https://www.cloudflare.com/application-services/products/turnstile/

• Data protection information: https://www.cloudflare.com/privacypolicy/

Sendgrid
Incoming contact form inquiries are sent to us by email. We use the Sendgrid service from the provider Twilio to send the emails. Sendgrid receives the above-mentioned data as a processor.

• Registered office: Twilio Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland

• Website: https://sendgrid.com/en-us

• Data protection information: https://www.twilio.com/en-us/legal/privacy

A) Purpose of the processing

On our website, we sometimes embed videos from the YouTube service in order to make our content clearer and to provide you with additional information in audiovisual form. This serves to improve the user experience and the attractive presentation of our online offering. Another part of the videos is provided directly by our website without third-party providers.

B) Scope of the processing

When you visit a page with an embedded YouTube video, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Technical information such as the screen resolution, the browser used or the operating system may also be transmitted. If you are logged into your YouTube or Google account, YouTube can assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube or Google account before visiting our website. The integration usually takes place in extended data protection mode, which, according to YouTube, means that no cookies are initially set to analyze usage behavior - unless you actively watch the video.

C) Legal basis

The processing is based on your consent in accordance with Article 6(1)(a) GDPR, provided that you have consented to this via our consent management. No YouTube video will be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking on a YouTube video.

D) Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings and changing your selection there. Further information on revoking and preventing the setting of cookies can be found in the Cookie Policy.

E) Storage period

The specific storage duration of the data processed by YouTube is the responsibility of YouTube or Google. We have no influence on the duration of storage. Further information can be found in Google's privacy policy.

F) Recipients of the data

The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Art. 46 GDPR.

• Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Website: https://www.youtube.com/

• Data protection information: https://policies.google.com/privacy?hl=de

A) Purpose of the processing

We use the map service Google Maps to provide you with an interactive map and to enable you to use the map function conveniently. This makes it easier to find our locations and the locations of our partner companies.

B) Scope of the processing

When you access a sub-page in which Google Maps is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google servers and stored there. Google may use this data to create user profiles.

C) Legal basis

The use of Google Maps is based on your consent in accordance with Article 6(1)(a) GDPR, provided that you have consented to this via our consent management. Google Maps will not be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking within the location finder.

D) Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings and changing your selection there. Further information on revoking and preventing the setting of cookies can be found in the Cookie Policy.

E) Storage period

The specific storage period of the processed data is determined by Google. We have no influence on how long the collected data is stored. Further information on data storage can be found in Google's privacy policy.

F) Recipients of the data

The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA, among other places. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Art. 46 GDPR.

• Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Website: https://www.google.de/maps/

• Data protection information: https://policies.google.com/privacy?hl=de