Data protection declaration

Personal data are data enabling the direct or indirect identification of your person, such as name, address, email address or telephone number.

Thales GE collects, processes and stores your personal data only where this is permitted on the basis of legal regulations or you have given your consent. We receive these data in two ways: Either you have communicated the data to us or we collect them when you use our services.

1.1 Data you communicate to us

Normally you can use our website without directly communicating personal information to us. For some services we will ask you for personal information to be able to deliver the respective service quickly and user-friendly or to allow us to offer the service as such.

1.2 Data we obtain from your use of our services

Some data arise automatically and for technical reasons when you visit our website. These data are stored temporarily in a so-called log file. The following information is collected without your active involvement and stored until it is deleted automatically:

• Page from which the new page or file has been requested
• Name of the file or page opened
• Date and time of the request, success of the request and server load at the time of the request
• Data volumes transferred
• IP address assigned to you by the provider
• If you log in with a user account, then also the login information for the respective web service
• Client detection (mobile, desktop etc.)
• Our agent

The data mentioned are only analysed by us for statistical purposes and processed for the following purposes:

• Guarantee of establishing a smooth connection to the website,
• Guarantee of a comfortable use of our website,
• Analysis of system security and stability.

The legal basis for the data processing is Article 6 paragraph 1. lit. (f)  GDPR. Our legitimate interest arises from the data collection purposes listed above. We never use the collected data for the purpose to identify your person.

2.1 Contract data processing

When processing your personal data during the operation, maintenance and improvement of the website, selected service providers within the European Economic Area (“EEA”), who are bound by data protection laws and reviewed regularly, are given access to the data we collect.

2.2 Cross-border transmission within the Thales Group

The transmission of your personal data within the Thales Group as described in this data protection declaration may include the transmission of your personal data to Thales companies outside the EEA.

This forwarding may include the transmission of your personal data out of the European Economic Area (EEA) to Australia, Canada, China, India, Indonesia, Japan, Singapore and the United States of America for the following purposes: (i) To process your enquiries; (ii) To manage your applications; and (iii) solution finding and maintenance purposes.

However, we only transmit your personal data to a location outside the EEA if this transmission is to a place or in circumstances where the European Commission assumes that your personal data are provided with adequate protection; for example where we have agreed standard contractual clauses recognised by the European Commission. You can receive a copy of these conditions by sending a request to the contact address provided below.

3.1 Definition of the term

“Cookies” are small files created automatically by your browser and stored on the end device (laptop, tablet, smartphone etc.). Cookies do not contain viruses, trojans or other malware.

Cookies are used to store information which is always related to the specific end device used. This does not mean that they provide us with direct knowledge of your identity. Cookies are used to design the use of our service more convenient for you. The following types of cookies can be differentiated.

Essential cookies are required to operate a website and are necessary for its navigation and the use of its functions. These cookie are not permanently stored on your computer or device and are deleted when you exit your browser (session cookies).

Statistical, analytical and performance cookies permit the capture and counting of visitor numbers and traffic sources in order to measure and improve the performance of the website. They are also used to find out whether problems or errors occur for specific pages, which pages are most popular and how visitors navigate the website. Analytical / performance cookies are deleted after a predefined retention time.

Tracking cookies are used to track the visits and individual activities on websites. They are used for the statistical capture and analysis of the use of websites. These cookies are automatically deleted after their respective defined time periods.

3.2 Use for customers

We currently use cookies on our website to ensure correct operation:

Please also refer to the notes on cookies at https://www.thalesgroup.com/en/worldwide/cookies-thalesgroup

The data processed by cookies are required for the above-mentioned purposes to safeguard our legitimate interests according to Article 6 paragraph 1. lit. (f)  GDPR.

Your browser offers the option to display the cookies found on your computer, to delete existing cookies or adjust the configuration to no longer store all or any cookies. Please note that some functions no longer work or no longer work correctly if you disable the placement of cookies.

The measures listed and utilised by us are carried out on the basis of Article 6 paragraph 1. lit. (a),(b) or (f)  GDPR (based on the legitimate interest of the provider - letter f; contractual or quasi-contractual basis - letter b; or your consent - letter a). We intend to ensure an appropriate design and ongoing optimisation of our website through the measures used. We also use the measures to statistically record the use of our website and analyse this to optimise our offer to you. These interests must be considered as legitimate interest in the meaning of the above-mentioned regulations.

The respective data processing purposes and data categories can be found in the corresponding tools.

4.1 Google Tag Manager

This website uses the Google Tag Manager. The Google Tag Manager facilitates the management of website tags via an interface. The actual Tag Manager tool (which implements the tags) is a cookie-free domain and does not collect personal data. The tools provides for the resolution of other tags which in turn might collect data. Google Tag Manager does not access these data. If cookies were disabled at domain or cookie level, this remains the case for all tracking tags implemented with Google Tag Manager.

4.2 Google Analytics

For the purpose of the appropriate design and ongoing optimisation of our web pages we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; subsequently called “Google“). Pseudonymised use profiles are created and cookies used in this context. The information about your use of the website generated by the cookie, such as

• browser type/version,
• operating system used,
• referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of the server request,

are transmitted to and stored on a Google server in the USA. The information is used to analyse the use of the website, compile reports about the website activities and provide additional services related website usage and internet usage for market research purposes and the appropriate design of these websites. This information might also be forwarded to third parties where this is required by law or where third parties process of these data (on the basis of an order processing agreement). Your IP address is never combined with other data by Google. The IP addresses are anonymised preventing them from being associated (IP masking).

You can prevent the storage of the cookies via appropriate settings in your browser software; however, we want to point out that in this case you might not be able to make full use of all functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively to the browser add-on, in particular for browsers on mobile end devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is placed to prevent the future collection of your data when you visit this website. The opt-out cookie only applies to this browser and our website and is stored on your device. If you delete the cookies in this browser, you must place the opt-out cookie again.

Additional information on data protection in relation to Google Analytics is, for example, available in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

4.3 Twitter Button

We use “Twitter Button” in our internet presence, a service of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (https://about.twitter.com/de.html). Twitter Button stores and processes information about your user behaviour on our internet presence. To this end, Twitter Button also uses cookies, i.e. small text files stored locally in the cache of your browser on your end device which permit the analysis of your use of our internet presence.
We use Twitter Button for marketing and optimisation purposes, in particular to analyse the use of our internet presence and continuously improve individual functions and offers and the user experience. Through the statistical analysis of the user behaviour we can improve our offer and design it more interesting for you as a user. This also constitutes our legitimate interest in the processing of the above-mentioned data by third parties. The legal basis is Article 6 paragraph 1. lit. (f)  GDPR.

You can prevent the installation of cookies by deleting existing cookies and disable the storage of cookies in your web browser configuration. We want to point out that in this case you might not be able to fully use all functions of our internet presence. You can also prevent the collection of the above-mentioned information by Twitter by placing an opt-out on one of the websites linked below:

https://twitter.com/personalization
http://optout.aboutads.info/?c=2#!/

We want to point out that this configuration is deleted when you delete your cookies. You can object to the collection and forwarding of your personal data or prevent the processing of these data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code by installing a JavaScript blocker. We want to point out that in this case you might not be able to fully use all functions of our internet presence. Twitter has now also submitted to the privacy shield agreement signed between the European Union and the USA and obtained certification. Twitter thereby commits to observe the standards and regulations of European data protection laws. Further information is available in the entry linked below: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

Additional data protection information by third parties is available on the website below: https://twitter.com/de/privacy.

4.4 Twitter Syndication

We use “Twitter Syndication” in our internet presence, a service of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (https://about.twitter.com/de.html). Twitter Syndication stores and processes information about your user behaviour on our internet presence. Twitter Syndication inter alia also uses cookies, i.e. small text files stored locally in the cache of your browser on your end device which permit the analysis of your use of our internet presence.

We use Twitter Syndication for marketing and optimisation purposes, in particular to analyse the use of our internet presence and continuously improve individual functions and offers and the user experience. Through the statistical analysis of the user behaviour we can improve our offer and design it more interesting for you as a user. This also constitutes our legitimate interest in the processing of the above-mentioned data by third parties. The legal basis is Article 6 paragraph 1. lit. (f)  GDPR.

You can prevent the installation of cookies by deleting existing cookies and disable the storage of cookies in your web browser configuration. We want to point out that in this case you might not be able to fully use all functions of our internet presence. You can also prevent the collection of the above-mentioned information by Twitter by placing an opt-out cookie on one of the websites linked below:

https://twitter.com/personalization
http://optout.aboutads.info/?c=2#!/

We want to point out that this configuration is deleted when you delete your cookies. You can object to the collection and forwarding of your personal data or prevent the processing of these data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code by installing a JavaScript blocker. We want to point out that in this case you might not be able to fully use all functions of our internet presence. Twitter has now also submitted to the privacy shield agreement signed between the European Union and the USA and obtained certification. Twitter thereby commits to observe the standards and regulations of European data protection laws. Further information is available in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

Additional data protection information by third parties is available on the website below: https://twitter.com/de/privacy.

4.5 LinkedIn Marketing Solutions

We use "LinkedIn Marketing Solutions” in our internet presence, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (https://about.linkedin.com/de-de). LinkedIn Marketing Solutions stores and processes information about your user behaviour on our internet presence. LinkedIn Marketing Solutions inter alia also uses cookies, i.e. small text files stored locally in the cache of your browser on your end device which permit the analysis of your use of our internet presence. We use LinkedIn Marketing Solutions for marketing and optimisation purposes, in particular to analyse the use of our internet presence and continuously improve individual functions and offers and the user experience. Through the statistical analysis of the user behaviour we can improve our offer and design it more interesting for you as a user. This also constitutes our justified interest in the processing of the above-mentioned data by third parties. The legal basis is Article 6 paragraph 1. lit. (f)  GDPR.

You can prevent the installation of cookies by deleting existing cookies and disable the storage of cookies in your web browser configuration. We want to point out that in this case you might not be able to fully use all functions of our internet presence. You can also prevent the collection of the above-mentioned information by LinkedIn by placing an opt-out on one of the websites linked below:

https://www.linkedin.com/psettings/guest-controls
http://optout.aboutads.info/?c=2#!/
http://www.youronlinechoices.com/de/praferenzmanagement/

We want to point out that this configuration is deleted when you delete your cookies. You can object to the collection and forwarding of your personal data or prevent the processing of these data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code by installing a JavaScript blocker. We want to point out that in this case you might not be able to fully use all functions of our internet presence.

LinkedIn has now also submitted to the privacy shield agreement signed between the European Union and the USA and obtained certification. LinkedIn thereby commits to observe the standards and regulations of European data protection laws. Further information is available in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Additional data protection information by third parties is available on the website below: https://www.linkedin.com/legal/privacy-policy.

4.6 LinkedIn Ads

We use "LinkedIn Ads” in our internet presence, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (https://about.linkedin.com/de-de). When you visit our website a direct connection is established via the remarketing tags between your browser and the LinkedIn server. This provides LinkedIn with the information that you visited our website with your IP address. This allows LinkedIn to assign the visit of our website to your user account. We can utilise the information obtained in this way for displaying LinkedIn ads. LinkedIn Ads inter alia also uses cookies, i.e. small text files stored locally in the cache of your browser on your end device which permit the analysis of your use of our internet presence. This also constitutes our legitimate interest in the processing of the above-mentioned data by third parties. The legal basis is Article 6 paragraph 1. lit. (f)  GDPR. You can prevent the installation of cookies by deleting existing cookies and disable the storage of cookies in your web browser configuration. We want to point out that in this case you might not be able to fully use all functions of our internet presence. You can also prevent the collection of the above-mentioned information by LinkedIn by placing an opt-out cookie on one of the websites linked below:

https://www.linkedin.com/psettings/guest-controls
http://optout.aboutads.info/?c=2#!/
http://www.youronlinechoices.com/de/praferenzmanagement/

We want to point out that this configuration is deleted when you delete your cookies. You can object to the collection and forwarding of your personal data or prevent the processing of these data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code by installing a JavaScript blocker. We want to point out that in this case you might not be able to fully use all functions of our internet presence.

LinkedIn has now also submitted to the privacy shield agreement signed between the European Union and the USA and obtained certification. LinkedIn thereby commits to observe the standards and regulations of European data protection laws. Further information is available in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

Additional data protection information by third parties is available on the website below: https://www.linkedin.com/legal/privacy-policy.

4.7 Trade Desk

We use “The Trade Desk Remarketing Tools” in our internet presence, a service of The Trade Desk Inc., 42 N. Chestnut St. Ventura, CA 93001, USA. (https://www.thetradedesk.com/about). This function is used to present visitors with advertising displays on external websites related to their interest. The browser of the website visitor stores so-called “cookies”, test files stored on your computer which allow for the visitor to be recognised when he accesses external websites. Advertising displays related to the content of our advertising offers may be presented to the visitor on external sites. Cookies are small text files stored locally in the cache of your browser on your end device which permit the analysis of your use of our internet presence. This also constitutes our legitimate interest in the processing of the above-mentioned data by third parties. The legal basis is Article 6 paragraph 1. lit. (f)  GDPR. You can prevent the installation of cookies by deleting existing cookies and disable the storage of cookies in your web browser configuration. We want to point out that in this case you might not be able to fully use all functions of our internet presence. You can also prevent the collection of the above-mentioned information by LinkedIn by placing an opt-out cookie on one of the websites linked below: https://www.adsrvr.org/opt-out.html.

We want to point out that this configuration is deleted when you delete your cookies. You can object to the collection and forwarding of your personal data or prevent the processing of these data by disabling the execution of JavaScript in your browser. You can also prevent the execution of JavaScript code by installing a JavaScript blocker. We want to point out that in this case you might not be able to fully use all functions of our internet presence. The Trade Desk processes your personal data also in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. Additional data protection information by third parties is available on the website below: https://www.thetradedesk.com/general/privacy-policy.

4.8 Facebook Custom Audience

We use “Custom Audiences Pixel“ by Facebook Inc.,1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook“) on our website. This serves the purpose to present visitors of our website with advertising displays related to their interest when visiting the social network Facebook. Inter alia, a pixel by Facebook has been implemented on our website. Via this pixel a direct connections to the Facebook servers is established when you visit our website. This transmits to the Facebook server that you visited our website, and Facebook assigns this information to your personal Facebook user account.

More information on the collection and use of data by Facebook and on your related rights and options to protect your private sphere is available in the data protection notices of Facebook at https://www.facebook.com/about/privacy/. You can object to interest-related advertising on Facebook at https://www.facebook.com/settings/?tab=ads#_=_. To do so, you must be logged into Facebook.

4.9 Contact form

Thales Deutschland does not offer a separate contact form on its website. However, the site links to the corresponding form of the Thales Group. You can use this to contact Thales Deutschland. Enquiries concerning Thales Deutschland are then forwarded to us.

The website of the Thales Group provides you with the option to contact us via a contact form in order for us to also answer your individual questions. To allow colleagues of the Thales Group to process your concern to the best of their ability and forward it to the correct contact, various categories are offered for selection.

For enquiries relating to applications and supplier relations you are forwarded directly to the application portal or supplier online portal. Please refer to the respective data protection declarations applicable on these portals.
For product and service enquiries, please further specify your concern by mentioning the business division concerned so we can forward your enquiry to the correct contact. We have to point out that these contacts may also work in other companies of the Thales Group. Some business divisions are so large that further narrowing-down is useful, however, this is voluntary.

4.10 Social Media

Through our social media sites (Facebook, YouTube, Google Plus, Twitter, Xing, LinkedIN, Pinterest) we also offer you comprehensive personal support and the option to contact us on the basis of Article 6 paragraph 1. lit. (f)  GDPR. These social media services in turn collect personal data, e.g. about your profile created there or about so-called plug-ins implemented on third party websites. The purpose and scope of the data collection and subsequent processing and use of the data by these companies and your related rights and configuration options to protect your private sphere can be found in the data protection notices of:

• Facebook: https://www.facebook.com/policy.php
• Google: https://www.google.de/intl/de/policies/privacy/
• YouTube: https://www.google.de/intl/de/policies/privacy/
• Twitter: https://twitter.com/de/privacy
• Xing: https://www.xing.com/privacy
• Kununu: https://privacy.xing.com/de/datenschutzerklaerung
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Pinterest: https://policy.pinterest.com/de/privacy-policy
• Instagram: https://help.instagram.com/519522125107875

Thales GE enters into various agreements (e.g. agreements with suppliers, system partners, service providers, repair handling) to meet its commercial purpose. The data collection and processing serves to establish, implement and terminate the contractual relationship. The main legal basis for this is Article 6 paragraph 1. lit. (b) GDPR. Where necessary we process your data also on the basis of Article 6 paragraph 1. lit. (f)  GDPR to protect the legitimate interests of Thales GE or third parties (e.g. authorities). Within the Group this applies in particular for purposes of Group controlling, internal communication and other administrative purposes. In addition, the processing of personal data may be based on your consent.

5.1 Which data categories does Thales GE use

The processed categories of personal data include in particular your contact data (company name, address, first and surname of a contact, (mobile) telephone number, email address of the responsible contacts) and, dependent on the purpose, also the bank account details and, where applicable, the VAT registration number. If you want spare parts delivered to a different location, you can communicate additional contact data to us, which we then also collect and process for this purpose.

We would like to point out that as part of the respective contractual relationship you must provide those personal and company data which are required to establish, implement and terminate the contractual relationship or performance commitment and their respective fulfilment or which we must collect by law.

5.2 How long are your data stored

We delete your personal data as soon as they are no longer required for the above-mentioned purposes or you have exercised your right to objection. After termination of the contractual relationship your personal data will be stored as long as we are legally obliged to do so. This is regularly the consequence of legal verification and retention obligations provided for, inter alia, in the commercial code and the fiscal code. Accordingly, the storage duration is up to ten years. It may also happen that personal data are retained for the time period during which claims may be asserted against us (statutory limitation period of three to thirty years).

Our locations in Germany are under video surveillance.
a) Purposes and legal basis of data processing:

• Access control;
• Property and responsibility protection;
• Prevention, containment and clarification of criminally relevant behavior.

Legal basis: Art. 6 para. 1 f) DSGVO; § 4 BDSG.
b) Legitimate interests pursued:

• Implementation of technical and organizational measures for access control;
• Prevention of criminal acts;
• Investigation of criminal offences;
• Preservation of evidence;
• Defense against dangers and vandalism;
• Exercise of domiciliary rights.

c) Storage period: 72 hours.

You will, of course, retain control over all personal data you provide to us when visiting our website and using our services. You may exercise your rights as affected person or your right to complaint at any time:

• Right to information according to Article 15 GDPR: You have the right at any time to obtain information about your personal data stored with us.
• Right to rectification, erasure or restriction of processing according to Article 16, 17, 18 GDPR: You have the right to obtain rectification of inaccurate personal data, erasure of personal data or restriction of processing.
• Right to data portability according to Article 20 GDPR: You have the right to apply for the transmission of your data in a machine-readable format from us to another body.
• Right to objection according to Article GDPR: You have the right to revoke your consent to the collection of data at any time. This right applies with future effect; it does not affect the data collected until the revocation takes effect.
• Right to lodge a complaint according to Article 77 GDPR: You have the right to lodge a complaint with the EU data protection authority responsible for your country if you are not satisfied with our response to your complaint or think that our processing of your personal data is not compatible with the data protection laws.

Please contact the persons listed at the end of this data protection declaration. The contact data of the individual EU data protection authorities are found at the following address:
http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

The criterion for the storage duration of personal data is the respective statutory retention period. After expiry of the period the corresponding data are routinely deleted if they are no longer required to meet the necessary purposes.

For enquiries, information requests, applications, complaints or criticism concerning our data protection please contact the following body:

Data protection team
Thales Deutschland
Thalesplatz 1
71254 Ditzingen

Germany
DE-Datenschutz@thalesgroup.com