Privacy Statement

1. General information about the collection of personal data

a) Protecting your privacy while you use our web pages is very important to us. Accordingly, we use your personal data in compliance with the statutory provisions on data protection. Personal data is all data that can be associated with you personally, e.g., your name, address, email address, or user behavior. In the following, we provide you with information about how we use your personal data.
b) The Controller pursuant to Art. 4 [7] EU General Data Protection Regulation (GDPR) is: ITW Fastener Products GmbH, Am Pulverhäuschen 7, 67677 Enkenbach-Alsenborn. You can reach our data protection officer at: datenschutz@itwfasteners.com or via our mailing address above, to the attention of “the Data Protection Officer.”
c) If you are under 16 years of age, please get permission from your parent/guardian before providing ITW Fastener Products GmbH with your personal data.

2. Collection of personal data during visits to our website

a)
When you visit the website https://www.itw-fasteners.com/en/, ITW Fastener Products GmbH will collect only the personal data that your browser sends to the server of ITW Fastener Products GmbH. That includes the following data, which is technically required in order to show you the website and to ensure its stability and security.

The web server will automatically identify certain types of personal data, for instance:

your IP address,
the date and time when you visited our site,
the pages you visited on our site,
the previous website you visited,
the browser you used (e.g., Google Chrome, Edge, Firefox)
the operating system you used (e.g., Windows, Linux, MAC OS) as well as the domain name and address of your internet provider (e.g., 1&1, Telekom, Unitymedia).

Where our website uses cookies (as explained below), the web server will also save this information. The legal basis is Art. 6 [1] S.1f GDPR as well as § 25 [2] TTDSG [German Telecommunications-Telemedia Data Protection Act] for essential cookies. Our legitimate interest here is in making our website and offerings available to you.

For all other cookies, we will obtain your consent pursuant to Art 6 [1] S. 1a GDPR as well as § 25 [1] TTDSG.

If the system is misused, we can also use this information in collaboration with your internet provider and/or public authorities on site to determine who misused it.

b)
In addition to the abovementioned data, cookies are saved on your computer when you use our website. We will obtain your consent for all cookies other than essential cookies. Cookies are small text files that can be saved through a website in a user’s internet browser. Cookies are not malware or a virus, but are rather a saved text program that can be retrieved by the web server at a later point. Cookies cannot run any programs or give viruses to your computer. They are used to make the website more user-friendly and efficient overall.

ba) This website uses the following types of cookies, whose scope and function will be described below:

transient cookies (see bb)
persistent cookies (see bc)

bb) Transient cookies are automatically deleted when you close the browser. In particular, these include session cookies. Session cookies save a “session ID” that can be used to assign various requests by your browser to the shared session. This allows your computer to be recognized if you return to our website. Session cookies are deleted if you log out or close the browser.

bc) Persistent cookies are automatically deleted after a specified period of time, which can differ depending on the cookie. You can delete cookies in your browser’s security settings at any time.

bd) You can configure your browser settings depending on your preferences, e.g., choosing to accept all third-party cookies or to block all cookies. Please note that in the latter case, you may not be able to use all the features of this website.

3. Google Analytics & Google Tag Manager

a) Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Scope of processing:
Google Analytics uses cookies that allow your use of our web pages to be analyzed. As a rule, the information collected by these cookies through your use of this website is transferred to a Google server in the United States and saved there.

We use the ‘anonymizeIP’ function (known as IP masking). Because IP anonymization is enabled on this website, Google will shorten your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. The IP address transferred by your browser through Google Analytics will not be combined with other data from Google.

During your website visit, the following data will be collected, among other things:

the pages you retrieve – your “click path”
fulfillment of “webpage objectives” (conversions, e.g., newsletter subscriptions, downloads, purchases)
your user behavior (for instance clicks, length of stay, bounce rates)
your approximate location (region)
your IP address (in abbreviated form)
technical information about your browser and the end devices you are using (e.g., language settings, screen resolution)
your internet provider
the referrer URL (which website / which ad brought you to this website)

Purposes of processing:
Google will use this information on behalf of the operator of this website in order to analyze your use of the website and to compile reports on the website activities. The reports provided through Google Analytics are used to analyze the performance of our website.

Recipient:
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as the Processor. We have concluded a data processing contract with Google for this purpose. Google LLC, headquartered in California, USA, as well as US public authorities, where applicable, can access data stored by Google. This data is transferred to Google servers in the United States. Please note that the level of data protection guaranteed within the EU cannot be equally guaranteed in the United States. Google Ireland Limited and Google LLC have jointly established suitable guarantees in the sense of Art. 46 GDPR.

Transfer to third countries:
It can be assumed that personal data will be transferred to the United States.

Length of storage:
The data we send that is linked to cookies will be deleted automatically after 14 months. Data for which the retention period has ended is deleted automatically once per month.
You can also prevent data generated by the cookie relating to your use of the website (including your IP address) from being recorded and processed by Google, by

not consenting to the placement of cookies or
downloading a browser add-on to disable Google Analytics and installing it.

You can also block cookies by configuring the appropriate settings in your browser software. However, if you configure your browser to reject all cookies, it may limit the functions of this and other websites.

Legal basis and revocation option:
The legal basis for this data processing is your consent, pursuant to Art. 6 [1] S.1 lit. a GDPR as well as § 25 [1] TTDSG. You can revoke your consent at any time with effect for the future by opening the Cookie settings and changing your selections.

More information about the terms of use for Google Analytics and about data protection at Google can be found under https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de

a) Google Tag Manager

Our website uses Google Tag Manager, which is provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager allows us to centrally integrate and administer sections of code from various tracking tools that we use on our website. These small sections of code are called tags. The tags record your activities on our website.

Scope of processing:
We use Google Tag Manager to optimize our website by featuring the products and services that interest you. For instance, we can use Google Analytics to see what interests you the most, which helps us improve our services. To optimize tracking, corresponding Java scripts must be integrated into the website. Google Tag Manager helps us sort the various tags. Google Tag Manager is also easy to use, even without programming experience.

Google Tag Manager does not store any personal data itself. Google Analytics is used to save personal data. For more information, please see the section on Google Analytics in this Privacy Policy.

Purposes of processing:
We use Google Tag Manager exclusively to manage the implemented tags.

Recipient:
The data recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as the Processor. We have concluded a data processing contract with Google for this purpose. Google LLC, headquartered in California, USA, as well as US public authorities, where applicable, can access data stored by Google. However, we use Google Tag Manager to transfer only anonymized data. This data can no longer be traced to you. This data is transferred to Google servers in the United States. Please note that the level of data protection guaranteed within the EU cannot be equally guaranteed in the United States. Google Ireland Limited and Google LLC have jointly established suitable guarantees in the sense of Art. 46 GDPR.

Transfers to third countries:
We use Google Tag Manager to transfer only anonymized data to the United States.

Length of storage:
Please see the individual tracking tools, e.g. Google Analytics, to learn how long the data is stored.

More information about the terms of use for Google Tag Manager and about data protection at Google can be found under https://support.google.com/tagmanager/answer/6102821?hl=de and under https://policies.google.com/?hl=de

4. Borlabs Cookie (cookie consent manager)

This website uses Borlabs Cookie, which places a technically necessary cookie (borlabs-cookie) that saves your cookie settings.

Borlabs Cookie does not process any personal data.

The Borlabs Cookie saves the declarations of consent that you provide when accessing the website. Please note that the cookie consent manager is used on the basis of our legitimate interest (Art. 6 [1] lit. f) GDPR) to ensure that we have obtained your consent for any cookies that are not necessary to operate the website before the start of processing. You have the option to revoke your consent for cookies by using the following link in the cookie banner. You also have the option to clear the cookies in your browser. This may mean that you will be asked to accept cookies again if you reload or re-access the website. To revoke this consent, simply clear the cookie in your browser.

More information about data protection can be found under the following link: https://de.borlabs.io/

5. OnTheGoSystems

This website uses a cookie provided by OnTheGoSystems Limited, which places a technically necessary cookie in order to save your language settings for our website.

More information about data protection can be found under the following link: https://www.onthegosystems.com/legal/privacy-policy-and-gdpr-compliance/

6. Integration of YouTube videos

We have integrated YouTube videos into our online offering; these are saved on YouTube.com and can be played directly on our website. [All of these videos are integrated using “expanded data protection mode”; i.e., no data about you as the user will be transferred to YouTube if you do not play the videos. The data named in [2] will be transferred only if you play the videos. We do not have any influence over this data transfer.] The legal basis for displaying the videos is Art. 6 [1] S. 1 lit. a GDPR as well as § 25 [1] TTDSG, i.e., they are only integrated after you provide consent. You can revoke your consent at any time.

When the video is activated, YouTube is informed that you have retrieved the corresponding sub-page of our website. In addition, the abovementioned basic data, like the IP address and time stamp, is transferred. This occurs regardless of whether or not YouTube provides a user account through which you are logged in. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be assigned to your YouTube profile, you must log out before clicking the button. YouTube saves your data in a user profile and uses it for purposes of advertising, market research, and/or the need-based design of its website. In particular, such analysis takes place (even for users who are not logged in) in order to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles by contacting YouTube directly.

The collected information is saved on Google servers, including in the United States. For these cases, the provider states that it has established a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with the applicable data protection laws for international data transfers. We have also established standard data protection clauses with Google with the aim of observing an appropriate data protection level in the third country.

More information about the purpose and scope of data collection and its processing by YouTube can be found in the Privacy Policy for YouTube/Google. You can also find more information about your rights and settings options to protect your privacy here: www.google.de/intl/de/policies/privacy

7. Meta marketing pixel

This website uses a pixel provided by Meta Platforms Ireland when you visit our website. The responsible service provider is Meta Platforms Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Scope of processing:
The pixel notifies Meta Platforms Ireland which actions you performed on our website, along with data that could potentially be used to identify you (including information about the app/browser, language setting, time, IP address, ad ID).

Meta Platforms Ireland can use this data to see that you visited our website, what you clicked on, and when you clicked on a link in Facebook or Instagram that connected you to our website. That allows Meta Platforms Ireland to display interest-based ads on Facebook or Instagram or other websites that use this function. Meta can connect this data to your user account and use it for its own purposes. Processing of your data by Meta Platforms Ireland is explained further under https://www.facebook.com/about/privacy.

Purposes of processing:
We do not receive any data about you or other users from Meta Platforms Ireland; we only receive statistics that are aggregated for all users, showing how they used our offerings and ads on other platforms of Meta Platforms Ireland (Facebook, Instagram) within a certain period of time. That helps us analyze which of our ads were successful and which were not.

Recipient:
The data recipient is Meta Platforms Ireland. In transferring the data collected by Meta Pixel, we work with Meta Platforms Ireland as a “joint controller” pursuant to Art. 26 GDPR. We have concluded a separate agreement for this purpose (see here: https://www.facebook.com/legal/controller_addendum). Meta is solely responsible for its further processing. If you exercise your right to information, erasure, etc. (see the “Your rights” section), Meta Platforms Ireland is responsible for the implementation of your rights within this shared responsibility.

Transfer to third countries:
It can be assumed that personal data will be transferred to the United States.

8. LinkedIn Insight Tag

This website uses a pixel from LinkedIn when you visit our website. The responsible service provider is LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Scope of processing:
The pixel notifies LinkedIn which actions you performed on our website along with data that could potentially be used to identify you. LinkedIn can use this data to see that you visited our website, what you clicked on, and when you clicked on a link from LinkedIn that connected you to our website. That allows LinkedIn to display interest-based ads. LinkedIn can connect this data to your user account and use it for its own purposes.

Purposes of processing:
We do not receive any data about you or other users from LinkedIn; we only receive statistics that are aggregated for all users, showing how they used our offerings and ads on other platforms of LinkedIn within a certain period of time. That helps us analyze which of our ads were successful and which were not.

Recipient:
The data recipient is LinkedIn. In transferring the data collected by the pixel, we work with LinkedIn as a “joint controller” pursuant to Art. 26 GDPR. We have concluded a separate agreement for this purpose (see here: https://legal.linkedin.com/pages-joint-controller-addendum). LinkedIn is solely responsible for its further processing. If you exercise your right to information, erasure, etc. (see the “Your rights” section), LinkedIn is responsible for the implementation of your rights within this shared responsibility.

Transfer to third countries:
It can be assumed that personal data will be transferred to the United States.

Length of storage:
The personal data will be erased once the purpose of processing no longer applies, but at the latest after 180 days.

9. Contacting us

When you contact us via contact form, email, phone, or mail, we save the data you provide (e.g. name, email address) in order to respond to your questions. We will erase the data collected in this context once storage is no longer necessary or restrict processing where legal retention periods apply. The legal basis is Art. 6 [1] S. 1 lit f GDPR. Our legitimate interest consists of responding to your inquiries.

10. Do you need to share your personal data or make it available?

We provide this page in order to present our company and the corresponding product portfolio for the company division to you.

We have a legitimate interest in providing this site as an information and communication platform for all website visitors.

You are fundamentally not required to provide us with your data. However, please note that processing of your personal data may be required in order to visit our website and/or to use the services we offer.

11. Do we make automated decisions about you?

There is no automated decision-making based exclusively on automated processing, including profiling, that has legal consequences or disadvantages you in a similar way.

12. Your rights

According to the GDPR provisions, you can assert the following rights against us:

right to information (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure / right to be forgotten (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object (Art. 21 GDPR)

Where the processing of your personal data is based on your consent, you have the right to revoke your consent at any time with effect for the future. The legality of any processing performed on the basis of your consent until the time of the revocation remains unaffected.

In order to assert one of the above rights, you can contact us at any time:

ITW Fastener Products GmbH
Am Pulverhäuschen 7
67677 Enkenbach-Alsenborn.
Email: datenschutz@itwfasteners.com

If you believe that we are processing your personal data in an impermissible manner, please contact us at: ITW Fastener Products GmbH, Attn.: Data Protection Officer, Am Pulverhäuschen 7, 67677 Enkenbach-Alsenborn or at the abovementioned email address. You also have the right to lodge an objection with a data protection supervisory authority of your choice.

13. Duration of storage

The storage periods for personal data depend on the respective purpose for which the personal data is processed, as well as on the respective tool in which this data is processed. Unfortunately, however, it is not possible to generally specify the various storage periods. The criteria used to determine the applicable storage periods are that we will keep your personal data:

as long as necessary for the respective purpose,
and/or beyond the length of the contractual relationship (where required),
according to the applicable statutory retention laws, or
as long as you have not revoked any previously provided consent.

14. Location of data processing

ITW Fastener Products GmbH primarily processes your data in a member state of the European Union or in another state party to the Agreement on the European Economic Area.

It is possible that the use of third-party cookies will result in the transfer of your personal data to a third country. We have noted this for the respective cookies in this Privacy Policy.

15. Sharing of your personal data

We share your personal data only with entities that require your data in order to fulfill tasks for us. This may require service providers to support us. In addition, it may be necessary to share your data with other units in our group of companies. In this case, we will observe the data protection requirements. In particular, your personal data may be shared with the following recipients:

our parent company and our affiliates,
IT service providers,
waste disposal providers,
public authorities, agencies, banks,
other service providers that assist us, e.g. with the hiring process.

16. Security measures

Where we forward data to our service providers within the context of the services described here, this data is subject to contractual data protection requirements in addition to the binding statutory provisions.

We implement security measures, which we continuously optimize according to technological and legal developments, in order to protect your data to the best of our ability from accidental or intentional manipulation, loss, destruction, or access by unauthorized third parties.

17. Links to other websites

Our website may contain hyperlinks to websites that are owned and operated by third parties. These third-party websites have their own privacy policies, and they presumably also use cookies; we recommend that you review these. The policies for these websites regulate the use of personal data that you provide during your visits to the relevant website, as well as data that is provided through cookies. We assume no responsibility for such third-party websites, and your use of such websites is at your own risk.

We also have no influence over whether their operators comply with the data privacy protection provisions. Consequently, we also assume no responsibility for ensuring that the information provided therein is accurate, up to date, and complete.

18. Contacting us

If you have any questions or comments about this Privacy and Cookie Policy, please contact us using the contact information for the Controller provided in this policy (see Point 1).

From time to time, the rapid development of the internet requires us to adjust our Privacy Policy. We will inform you of any updates here.

Latest revision of this Privacy Policy: March 2023