STULZ worldwide

 

PT Stulz Air Technology Indonesia Data Protection Declaration regarding the use of the website

https://www.stulz.com/en-id/

 

1.         Introduction

This data protection declaration shall inform you as to which of your personal data we, PT Stulz Air Technology Indonesia, collect and process as part of the use of our website https://www.stulz.id (“Website”) (hereinafter referred to collectively as “Processing”). We process personal data in order to offer our services to you. In this context, personal data shall refer to any information relating to an identified or identifiable natural person.

 

2.         Controller

PT Stulz Air Technology Indonesia (“we” or “us”) is responsible for the processing of personal information as part of the Website’s use. Our contact information is as follows: PT Stulz Air Technology Indonesia, Green Office Park 9, 1st Floor Wing A Zone 2, BSD Green Office Park, Jalan BSD Grand Boulevard, BSD City, Tangerang, Indonesia , tel.: +62 21 5020-7690, info(at)stulz(dot)id. For additional information, please see the Website’s legal notice (Imprint).

 

3.         Data protection officer

You can reach our data protection officer by email at info(at)stulz(dot)id or by writing to our mailing address (to the attention of the “Data Protection Officer”).

If you have any questions, concerns or suggestions related to the topic of data protection on the Website, you may contact the data protection officer at any time. Using the contact information as provided for our data protection officer, you may also assert your rights as a data subject. Please see Section 9 of this data protection declaration for more details.

 

4.         Automatic data processing during visit to our Website – purposes and legal bases

You can visit the Website and gather information without having to provide any personal data (e.g., by registering or transmitting data through online forms). In order to allow you to use the Website in a manner that is user-friendly, stable and safe, and to provide you with additional services, we will, however, automatically collect and process the (pseudonymous) technical data needed for this purpose with help from both your device and browser.

 

4.1       Automatic data collection and processing by web server

In order to show you the individual pages of the Website, our web servers automatically collect and process the following personal data, which are transmitted by your browser:

  • page visited on Website (URL)
  • user agent ID that may contain additional information (about operating system, browser type and version used, preferred language), depending on browser
  • referrer URL (page visited most recently, if available)
  • date, time and time zone of server request
  • IP address
  • host name of your Internet service provider (ISP)

Our web servers temporarily store the (pseudonymous) technical communication data collected and processed for the use of the Website in so-called server log files. Such data will not be evaluated with respect to a specific person, nor will they be combined with data from other sources. We use the server log files for internal system-related purposes; chief among them is ensuring the stability and security of our web servers and the Website. Whenever there is reason to suspect that our offerings are being used in an unlawful manner, we reserve the right to identify and track inadmissible or exploitative attempts to access our web servers using the IP address on file.

 

4.2       Direct marketing

We shall use the personal data for direct-marketing purposes, including but not limited to an email newsletter or postal advertising. Specifically, the following personal data will be processed in this regard: form of address, name, mailing address, email address and telephone number.

 

4.3       Customer service

We use your personal data for communicating with you. Specifically, the following personal data are processed for this purpose: contact information (name, mailing address, email address, telephone number).

 

4.4     Contacting us through contact form or by email, mail and telephone

You may contact us using the email address, telephone number or mailing address provided on the Website or by using a contact form – e.g., to receive information about our products and services or additional materials. Specifically, the following data may be processed at such instance, form of address, name, email address, mailing address, telephone number, such other personal data as you may provide on a voluntary basis. The data you provide are used exclusively to address your concern, to answer your question or to contact you, along with any related administrative task.

 

4.5       Cookies, web analytics tools and external contents

In order to make visiting the Website a user-friendly and attractive experience, and to facilitate the use of certain functions, we use cookies and other technologies that track information concerning your use of the Website. For this purpose, we also avail ourselves of services to be able to analyze your use of the Website and show you third-party contents.

We deploy the cookies needed for certain functions of the Website on the basis of our legitimate interest in providing and optimizing our offerings. In accordance with applicable law, your consent is required for the use of cookies and tools serving marketing or web analytics purposes as well as media services offered by external providers.

 

4.5.1    Cookies

We use so-called cookies on our Website to make certain functions available or more attractive. Cookies are small text files that are stored on your end device. Some of the cookies we use (so-called session cookies) are deleted once the browser session ends – i.e., when the browser is closed. Other cookies (so-called persistent cookies) remain on your end device and allow us to recognize your end device upon your return.

You can adjust your browser settings in order to be notified of cookies to be stored, so you can decide whether to accept cookies on a case-by-case basis – or block them in certain instances or as a rule. You can also choose a browser setting that ensures that cookies are automatically deleted when the browser is closed. The non-acceptance of cookies may compromise the Website’s functionality.

If you consented to the use of non-essential cookies and tools, you may withdraw your consent with effect for the future in “Privacy settings” at any time, be it wholly or in part. For more information about the non-essential cookies and services used, please refer to “Privacy settings” as well as the following sections of this data protection declaration.

 

4.5.2    Google Analytics

For purposes of measuring reach and analyzing your user behavior, as well as of evaluating and improving the Website, the web analytics service Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) is used on the Website. Google Analytics is not activated until you have given your consent in the category “Analysis” under “Privacy settings”. 

The service deploys cookies that allow your user behavior to be analyzed. During your visit to the Website, the following information may be collected: start of session, initial visit to Website, pages visited, interaction with Website (click/scroll path), internal search queries, clicks on external links, videos viewed, files downloaded, ads viewed and clicked, language setting. In addition, Google Analytics gathers the technical communication data mentioned in Section 4.1, including your IP address.

To facilitate an evaluation by Google Analytics, we have appended so-called UTM parameters to the addresses (URLs) of individual pages of the Website. These UTM parameters indicate the referrer source of the visit to the Website, the advertising medium used (e.g., ads on other Internet pages, email newsletters, social media) as well as the nature and content of the advertising campaign.

The information generated about your use of the Website are typically transmitted to, and stored and processed on, a U.S. server. However, with the IP anonymization on the Website activated, Google will first truncate your IP address within EU member states or other signatories of the European Economic Area (EEA) Agreement. Only by way of exception will the full IP address be transmitted to a Google server in the U.S. and be truncated there. Google will use this information to evaluate your use of the Website, to compile reports about your activities on the Website and to provide other services to us in connection with the use of the Website and the Internet. This may result in the creation of pseudonymous user profiles for users based on the data so processed.

You may deactivate your consent at any time under “Privacy settings.” And you may put a stop to cookie-based data processing as part of Google Analytics using any of the following options:

  • You prevent Google’s cookies from being stored by adjusting your browser settings accordingly; we shall note, however, that if you do so, some of the functions of the Website may not be available to you to their full extent.
  • You can also prevent Google from receiving and processing the data generated by the cookies about your use of the Website (which include your IP address) by downloading and installing the browser plug-in available here: http://tools.google.com/dlpage/gaoptout?hl=id.

We also use the Google Signals function with Google Analytics on our website, also with activation of IP anonymization. We receive statistics without personal data via Google Signals. If you have activated ads personalization in your Google account and your devices are linked to your Google account, Google can analyze your usage behavior across devices and generate reports. You can change the ads personalization settings in your Google Account to prevent cross-device tracking, https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de&visit_id=638301905539112235-1700265536&rd=1.

For additional information about the terms of use of Google Analytics, please visit https://marketingplatform.google.com/about/analytics/terms/id/; about Google Signals visit https://support.google.com/analytics/answer/7532985, for more information about data protection, please visit https://policies.google.com/technologies/partner-sites?hl=id; Google’s data protection policy is found here: https://policies.google.com/privacy.

 

4.5.3 Google Tag Manager

We use Google Tag Manager on our website. The provider of the Google Tag Manager is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager allows us to play out and manage tools (e.g. Google Analytics) on our website. The tools played via Google Tag Manager may in turn set cookies in your browser and process personal data. Information on the integrated tools can be found in the respective section of this privacy policy. Google Tag Manager itself processes your IP address, which may also be transmitted to Google servers in the USA. 

 

4.5.4    YouTube videos

We have integrated videos from the YouTube video portal, which is operated by Google (see Section 4.5.2). For this purpose, we avail ourselves of the option “extended data protection mode” provided by Google. Data processing requires that you have granted your consent in the category “Functional/external media” under “Privacy settings.” 

If you did consent, a connection is established with the Google servers, with contents being streamed on the Internet page following a message sent to your browser when you open a page featuring an integrated YouTube video. In the process, your IP address, device information as well as data about the website opened will be transmitted to Google. If you are simultaneously logged in with another Google service, such information may be matched to your membership account. You can prevent this from occurring by logging out of your membership account prior to visiting the Website.

Once you start playing an integrated video, Google will only store cookies on your device not containing personally identifiable data in “extended data protection mode” unless you are currently logged in to a Google service. These cookies may be blocked through appropriate browser settings and extensions.

For more information about data protection in connection with YouTube, please refer to Google’s data protection policy: https://policies.google.com/privacy.

 

4.5.6 Vimeo videos

We have integrated videos of the provider Vimeo LLC, located at 555 West 18th Street, New York, New York 10011, USA, on our Website by means of a plugin (Vimeo plugin) for the display of videos.

We have set up the integration of these videos in such a way that a connection to the Vimeo servers is not automatically established when you call up a page on our Website on which a video is integrated using the Vimeo plugin. For this purpose, the setting of cookies is deactivated by default for the embedded videos.

If you want to start the respective video, a connection to the Vimeo servers is required. In the process, your personal data in the form of your IP address, technical information about the end device you are using (e.g. browser type, operating system, basic device information) and the website you are accessing from will be transmitted to Vimeo's servers in the U.S. For this purpose, we ask for your explicit consent before starting the video. If you agree to the use of Vimeo's services, you also agree to your personal data being transmitted to Vimeo's servers in the U.S.

The data transfer will then take place regardless of whether you have a user account at Vimeo and are logged in there. However, Vimeo can assign your surfing behavior to your user account if you are logged in when you start the video. You can prevent this by first logging out of your user account and deleting the corresponding cookies.

Details on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy

 

5.         Online presences and services

5.1       Social networks

You can access our respective social media-appearance via link from our Website (Facebook, LinkedIn, Instagram, YouTube and TikTok). Our legitimate interest is the information and communication with the users of our Website. You can find more information about the data processing and possibilities to object under the following links:

Facebook: https://www.facebook.com/about/privacy/, https://facebook.com/settings?tab=ads

LinkedIn: https://www.linkedin.com/legal/privacy-policy, https://www.linkedin.com/psettings/guest-controls

Instagram: https://help.instagram.com/519522125107875

Youtube: https://policies.google.com/privacy, https://adssettings.google.com/authenticated

TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=id

 

5.2       Google Maps

If you consent to the use of Google Maps on a subpage in which Google Maps is embedded and activate the Plug-in, Google receives the information, that you entered the respective subpage of our Website. Moreover, data that your browser transmits to Google are collected. These are e.g., IP address, date and time of the query, data volume transferred, operating system und surface, language and browser software version.

This is regardless of whether Google provides a user account that you are logged in to or no user account exists. When you are logged in to Google, your data is assigned to your user account directly. Google stores your data as user profiles and uses them for purposes of advertisement, market research and/or needs-based design of the Website. For the exercise of any right, e.g., a right to object the creation of these user profiles, you have to contact Google directly.

By using Google Maps you agree to the Terms and Conditions of Google Maps. You can find further information about the processing of your personal data by Google Inc. in the Data Protection Declaration of Google Inc.: https://policies.google.com/privacy?hl=id. Google processes your personal data in the United States of America and has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov./EU-US-Framework).

 

6.         Sharing personal data

Generally, the personal data collected during the use of the Website are not passed on or otherwise shared with other parties unless specifically provided otherwise in this data protection declaration. This excludes mandatory transmissions of personal data to government agencies and authorities as well as private holders of rights as prescribed by applicable law or under court or official rulings, along with instances of necessary disclosure to state agencies and authorities in cases of attacks on our legal interests, for purposes of law enforcement and prosecution.

For the operation of the Website and the execution of individual functions and offers, we rely to some degree on external service providers that we select with care. To the extent necessary, these service providers working on our behalf process your personal data in accordance with our instructions under a given contract for the purposes stated in the data protection declaration. The same applies to any subcontractor if and to the extent that our processors use subcontractors with our prior consent.

In addition to the service providers mentioned in Sections 4 and 5, we rely on service providers to provide, service and maintain IT systems by way of processing under a contract.

 

7.         Processing personal data in “third countries”

We process the personal data collected on the Website within EU member states as a rule. Personal data shall only be transmitted to other “third countries” – i.e., countries outside of the European Union and the European Economic Area – if and to the extent that we expressly so inform you.

Insofar as you have consented to data processing undertaken by Google and Vimeo services (Sections 4.5.2, 4.5.3, 4.5.4 and 5.2), the data collected by them will be transmitted, in part, to other companies affiliated with Google and Vimeo and registered in the U.S. – namely Alphabet Inc. and Google LLC – as well as other Google and Vimeo services providers. For this purpose, Google and Vimeo uses standard contractual clauses approved by the European Commission.

 

8.         Length of storage

We shall store your personal data to the extent and for as long as is necessary for the purposes of processing we pursue. Insofar as statutory or contractual retention periods, during which your data must be stored, extend beyond such time, your personal data will be erased upon the lapse of a given retention period unless you expressly consented to the ongoing use of your data or we are entitled to such use on another legal basis.

The technical communication data contained in the server log files (Section 4.1) shall be deleted after 30 days, at the latest.

The session cookies we use are deleted when your browser is closed. Any persistent cookie we use will remain on your device until their prescribed life span has expired or you remove them manually (Section 4.5.1). The length of storage for individual cookies is listed in “Privacy settings”. Data collected by Google Analytics shall be deleted upon the anonymization of IP addresses (see Section 4.5.2). By way of an agreement with Google, we have limited the length of storage for data gathered by Google Analytics to be no more than 14 months.

Data from the statistical evaluation of the email newsletter are stored anonymously (Section 4.2).

If you contact us through one of our contact forms or by other means (Section 4.5), the data you provide shall be processed exclusively for the purpose of addressing your concerns and/or any additional questions you might have, and shall be erased thereafter. At the latest, the data will be erased six months after you last made contact.

 

9.       Data subject’s rights

9.1     Right of access, rights to rectification, erasure, restriction and data portability

Upon request, we shall be glad to inform you as to which personal data of yours are being processed, In the event that data concerning you are incorrect, you are entitled to have them rectified or restricted accordingly. You are further entitled to obtain the blocking or the erasure of the data we have stored about your person if the purpose of processing such data lapses or other legal requirements apply. In the event that erasure is opposed by statutory or contractual duties of retention, by duties of retention imposed by tax and/or commercial codes or for other reasons embodied in applicable law, your data may only be blocked – rather than erased. In addition, you shall hold a right to data portability. Upon request, you shall receive your personal data in a structured, commonly used and machine-readable format.

 

9.2       Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you as characterized in this data protection declaration infringes applicable law.