Privacy Policy

The Heraeus Customer Platform is a platform designed for the Heraeus companies to offer their services and/or products. The term "Heraeus companies" means all companies which are under the common control of Heraeus Holding GmbH. These are all companies in which Heraeus Holding GmbH holds, directly or indirectly, the majority of shares. The Heraeus Customer Platform is operated exclusively by Heraeus Noblelight GmbH. The respective Heraeus company offering its services and/or products on the Platform is hereinafter referred to as Heraeus.

As controller of the Heraeus Customer Platform, Heraeus Noblelight GmbH is committed to comply with the General Data Protection Regulation (hereinafter shortly referred to as "GDPR"), the new German Federal Data Protection Act (Bundesdatenschutzgesetz - hereinafter shortly referred to as "BDSG") as well as further applicable data protection legislation in the EU, its member states and other relevant jurisdictions in order to protect the personal data of customers and of the persons activated by registered customers (hereinafter referred to as "Users"). This Privacy Policy is intended for customers of Heraeus and Users of the Heraeus Customer Platform.

This Privacy Policy provides you with information of the type of personal data collected and processed by Heraeus and how Heraeus uses the personal data which are generated when you access the Heraeus Customer Platform. This Privacy Policy applies only to the Heraeus Customer Platform and not to any other website of Heraeus.

This Privacy Policy only applies to: Customers of Heraeus who are registered and Users who have been activated by registered customers of Heraeus. A registration directly via the Heraeus Customer Platform is not possible. If you wish to be registered as a customer, please contact hng-uv@heraeus.com

Only commercial customers can be registered who have accepted the terms and conditions of use in a registration application and agreed to be screened for compliance with the Anti-Money Laundering Act, for their creditworthiness and against terror lists. The data thereby collected are stored by Heraeus in data centers within the EU, and Heraeus will process these data exclusively for the purpose of the customers' registration for the Heraeus Customer Platform and for the conclusion of legal transactions with Heraeus on the Heraeus Customer Platform or otherwise. Heraeus will transmit these data solely to other Heraeus companies which have a business relationship with the respective customer or which require these data for the initiation or conclusion of legal transactions. Heraeus will not disclose these data to third parties which are not Heraeus companies unless Heraeus is obligated to do so by law or unless such data disclosure is required to enable these third parties to assist Heraeus in the performance of its legal obligations.

By signing the Application for Registration, you have already agreed to and accept this Privacy Policy of Heraeus. Nevertheless, please read this Privacy Policy carefully before using the Heraeus Customer Platform. By using the Heraeus Customer Platform, you as a customer or User agree to the processing of your personal data as described herein and expressly consent to such processing.

Heraeus may modify this Privacy Policy from time to time. If you continue to use the Heraeus Customer Platform after any modified version(s) of this Privacy Policy has been published on the Heraeus Customer Platform, it indicates that you accept and agree to the modified terms.

Please visit the relevant page of the Heraeus Customer Platform at regular intervals to check if any modifications of this Privacy Policy have been published.

If you do not agree with any modified versions of this Privacy Policy, you may cancel your registration effective immediately and stop concluding further legal transactions on the Heraeus Customer Platform. Cancellation of registration will mean that you can no longer use the Heraeus Customer Platform for any future transactions. The cancellation of your registration will not affect the validity of the legal transactions which were executed on the Heraeus Customer Platform prior Heraeus' receipt of your cancellation. As User, you may deactivate your access at any time. Details about the deactivation you can find in the terms of use.

In order to enable you to access the Heraeus Customer Platform and to provide you with all services available on the Heraeus Customer Platform, Heraeus collects and processes information. This information includes personal data such as first names and last names of customers and Users, their phone numbers and e-mail addresses, as well as the job title and company by whom they are employed. It may also include business information, contact details and order details which a User provides when it registers as a User. For this purpose, Heraeus uses the Azure Active Directory service of Microsoft Ireland Operations Ltd., which stores and processes your personal data in data centers within the EU on our behalf. Certain personal data is required for specific services and if customer/User fails to supply such personal data as requested when customer/User logs in, Heraeus may not be able to deliver customer the services in full.

Heraeus may share User’s personal data with any of Heraeus’ affiliates, whether in the United States of America, Hong Kong or elsewhere, for the purpose of creating and maintaining these services.

Heraeus may also transfer any information Heraeus has about customer/User in connection with a merger or sale involving all or part of Heraeus or as part of a corporate reorganization or any other change in corporate control. We will take all practicable steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy.

There are instances where your personal data may be transferred to a country which does not have legislation offering similar level of data protection as in the EU and/or Hong Kong. We set out below these scenarios and how you can avoid such data transfer.

(a) Overview Page of Legal Transactions

The page giving an overview of all legal transactions which you concluded with Heraeus is not accessible to other customers. However, each customer may grant to other persons access to this page. If customers or activated Users are located in a country which does not offer similar level of data protection as in the EU, and/or if Users are employed by other companies of the customer, personal data may be transferred to such third countries. By continuing to use this function, you as the customer and/or the User hereby expressly agree to such data transmission. Each customer may avoid data transmission to such third countries and/or to other companies by not allowing activation of Users located in such third countries or Users employed by other companies. Each User may avoid data transmission to such third countries and/or other companies by deactivating his/her access.

(b) Forwarding Function

The forwarding function offers customers and Users the possibility to forward questions via e-mail to other persons without access authorization while handling legal transactions on the Heraeus Customer Platform. When forwarding such questions, the e-mail addresses of the respective customer and the persons to which the questions are forwarded are collected and stored on the system. The Heraeus employees processing this customer's order cannot see the e-mail addresses of the persons without access authorization and that the forwarding function was used. The customer ensures that all recipients selected by it agree to the collection and storage of their e-mail addresses. Data may be transmitted to a country which does not offer similar level of data protection as in the EU and/or to other companies if the recipients of the forwarded questions are located in such third countries and/or are employed by other companies. By continuing to use this function, you as the customer hereby expressly agrees to such data transmission. Each customer may avoid such data transmission and the collection and storage of the recipients' e-mail addresses by not using the forwarding function.

(a) Use of necessary cookies

Cookies are used on the Heraeus Customer Platform that are re-quired to ensure the proper functioning of the platform's services. They provide a secure login, good performance and ensure that the login to the platform can also be displayed on other Heraeus websites. You may choose to disable these cookies on the browser of your device, however, if you prevent these cookies from being placed by setting your browser, it will not be possible to log in and use the platform. If you wish, you can limit the storage of cookies to these necessary cookies under "Settings".

(b) Use of Google Analytics

This website (Heraeus Customer Platform) uses Google Analytics, a web analytics service provided by Google ("Google"), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics uses so-called "cookies", which are text files placed on your computer, to help analyze your use of the Heraeus Customer Platform. The information obtained through cookies about your use of the Heraeus Customer Platform is usually transmitted to and stored by Google on servers in the United States

Google is certified under the EU-U.S. Privacy Shield Framework which ensures compliance with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).

However, due to the activated IP anonymization on the Heraeus Customer Platform, your IP address will be cut by the last three digits (the last octet) by Google within the member states of the European Union and other member states of the Treaty on the European Economic Area before it is transmitted to Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.

Google uses this information on behalf of the operator of the Heraeus Customer Platform (Heraeus Noblelight GmbH) in order to evaluate your use of the Heraeus Customer Platform, to compile reports on Heraeus Customer Platform activity, and to provide the operator of the Heraeus Customer Platform with other services relating to the use of the Heraeus Customer Platform and to the use of the Internet. The data retrieved in this context may be used to create pseudonymized User profiles.

The IP address transferred from your browser will not be linked with other Google data. You may prevent the storage of cookies by selecting the appropriate system settings on your browser. You may also prevent the recording and processing by Google of data generated by cookies and data related to your use of the Website by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en .

For further information on the use of data by Google, settings and opt-out options, please go to the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses information from sites or apps that use our services”), http://www.google.com/policies/technologies/ads (“Advertising”), http://www.google.de/settings/ads (“Control the information Google uses to show you ads”).

By continuing to use our services and not following the steps for deactivation as described below, you consent to the collection of data on your use of the Heraeus Customer Platform (including your shortened IP address) obtained through cookies, to the transmission of the data so collected to Google, and to the processing of this data by Google.

If you do not wish to have your personal data (including your shortened IP address) collected, used and processed, you can stop and prevent the storage of cookies by deactivating these cookies under (b) in the settings of the Heraeus Customer Platform. To do so, click on "Settings", and change and save the configuration under "Data Privacy".

Heraeus uses the information obtained through the Heraeus Customer Platform to enable you to utilize the services offered on the Heraeus Customer Platform as well as other business transactions with Heraeus, to enhance your experience with the Heraeus Customer Platform and its functions, to store your login data, to communicate with you, to enforce all service conditions or other agreements in connection with the Heraeus Customer Platform, and to provide you with the services you have requested.

Heraeus companies which offer their services and/or products on the Heraeus Customer Platform may disclose the personal data obtained by them through the Heraeus Customer Platform to third parties who are not Heraeus companies only:

(a) For the performance of a legal obligation of Heraeus, e.g. in information to fiscal authorities;

(b) For the replies to requests from law enforcement agencies if so required by applicable law, by a court order, or by administrative regulations;

(c) In the event of the sale, merger, liquidation, dissolution, reorganization, assignment or any other transfer of the Heraeus business to which such data and information are related. In such case, Heraeus requires a purchaser to treat your personal data in accordance with Heraeus' data protection and privacy practices as set forth in this Privacy Policy and to use your personal data for the same purposes for which the information is obtained; or

(d) In situations where a person's physical safety is at risk.

Heraeus will not otherwise disclose, sell, rent or trade your personal data to third parties who are not Heraeus companies. However, Heraeus will not assume any liability for the disclosure of any personal data which you have received due to transmission errors or unauthorized access by third parties. Heraeus may disclose to reputable third parties aggregated statistics on online traffic patterns and related information which do not contain any personal data or allow any conclusions to be drawn on particular customers or Users.

Heraeus will take all reasonable steps to ensure the security of your personal data. To prevent unauthorized access to or disclosure of customer’s/User’s personal data, Heraeus has implemented appropriate physical, technical and administrative measures to safeguard and secure the personal data Heraeus collects.

Heraeus also undertakes to use the data through the operation of the platform only for the purpose of creating and maintaining these services. No further use is made of such data beyond what is outlined in this section.

Where personal data is stored, accessed or transmitted via the Internet, it is not completely secure. The Heraeus Customer Platform may contain links that allow access to other websites and/or re-sources outside the control of Heraeus. These links are provided solely for customer convenience and shall not be construed as a link to Heraeus. Your access to such other third party websites (including the content, the elements or services offered on such websites) and your use and/or disclosure of information on such other websites is entirely at your own risk. Heraeus has no control over the content of such other websites or over the data protection or privacy practices of the companies operating such other websites. If you wish to get information about another party's data protection guidelines/privacy policies, you should contact such party directly, and we recommend that you do so. Moreover, a news stream can be used on the Heraeus Customer Platform. Heraeus does not assume any responsibility for the content of the news stream and the information published there.

Any personal data that is collected from customer/User will only be stored for as long as it is necessary for the purpose it is was collected for in accordance with applicable law.

To access for a copy of, review, rectify or delete your personal data held by Heraeus, you as a customer and/or User should contact Heraeus at hng-uv@heraeus.com . While Heraeus will make reasonable efforts to accommodate this request, Heraeus also reserves the right to impose certain restrictions and requirements on such access requests, to the extent that it is allowed or required by applicable laws. Heraeus may charge a reasonable fee for the processing of any data access request.

This website and the services available through this website are not intended for minors (persons under the age of 18 years). They cannot be registered as customers or activated as Users of the Heraeus Customer Platform.

If you have any questions, comments or concerns about this Privacy Policy or the data protection/privacy practices or information processing of the Heraeus Customer Platform, please contact the Heraeus Data Protection Officer at datenschutzbeauftragter@heraeus.com .

This Privacy Policy was last updated on November 18, 2020.