For the purposes of the General Data Protection Regulation (“GDPR”), the controller is:
Yokogawa Deutschland GmbH

Service provider’s registered office:
Yokogawa Deutschland GmbH
Broichhofstr. 7-11
40880 Ratingen
represented by the managing directors
Ulrich Pichler, Seita Hagihara
Contact information:
Telephone: +49 2102 4983-0
Fax: +49 2102 4983-22
Email: yef-g-lifeinnovation@yokogawa.com
Website: www.yokogawa.com/de 

Data to be protected

The data to be protected is personal data. “Personal data” means any information that refers to an identified or identifiable natural person (“data subject”). This includes information such as your name, postal address, email address, and telephone number, but also information created by necessity while our website is being used, such as that pertaining to the beginning, end, and scope of that use and the transmission of your IP address. For that reason, we have basically designed our internet services so that personal data can be collected, stored, and processed on the exclusive basis of the legal requirements of the General Data Protection Regulation while those services are being used.

Here are Yokogawa’s European Data Privacy Regulations.

Storing data

Whenever Yokogawa’s websites are visited, visitor data are stored. Yokogawa then evaluates the collected data for business purposes to optimise Yokogawa’s websites continually and adapt them to the needs of its visitors.

Cookies

Yokogawa uses cookies: small text files that are placed locally in your browser memory and allow us to analyse your use of our website.
You can prevent cookies from being placed by changing your browser settings appropriately. The “Help” function of most browsers’ menu bars will explain how you can delete cookies or keep your browser from accepting new ones.
However, we recommend that you leave the cookie function activated since you will otherwise be unable to use all functions of the Yokogawa websites.
Here is the list of cookies from Yokogawa Life Innovation Blog: https://www.yokogawa.com/eu/blog/life-innovation/en/

Essential cookies	PIWIK	Helps us analyze and visualize traffic
Functional cookies	LinkedIn Analytics	Helps us analyze and visualize traffic
Advertising cookies	Salesforce Pardot LinkedIn Ads Double Click Facebook Pixel	Helps us control advertising and remarketing campaigns

Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (“host”). The personal data collected on this website is stored on the host’s server. Those data primarily include IP addresses, contact requests, metadata, communication data, contract data, contact data, names, website visits, and other data generated through a website.
We use the host to execute the contracts we have entered with our potential and existing customers (Art. 6(1)(b) GDPR) and to have our online services provided securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR).
Our host will process your data only to the extent necessary to fulfill its service obligations and follow our instructions regarding those data.

Entering a contract on commissioned data processing

To guarantee processing that complies with data protection regulations, we have entered a contract on commissioned data processing with our host.

Server log files

The provider of these sites automatically collects and saves information in server log files that your browser automatically transmits to us. That information includes:

• Browser type and browser version
• Operating system used
• Referrer URL
• The hostname of the accessing computer
• Time of server request
• IP address

Those data will not be combined with other data sources.
The legal basis for collecting those data is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in displaying and optimising its website without technical errors, so the server log files must be collected to that end.

The comment function on this website

When you leave a comment on this site, that comment will be stored in addition to the following information: the time of your comment, your email address, and your username (unless your post was anonymous).

Storing the IP address

Our comment function stores the IP addresses of users who post comments. Since we do not check comments on this website before releasing them, we need that data to take action against any comment authors who commit legal infringements such as defamation or propaganda.

Storage period for comments

Comments and associated data (such as IP addresses) will be stored and will remain on this website until the comment’s content has been completely deleted, or the comment must be deleted for legal reasons (because it is defamatory, for example).

 Legal basis

The comments are stored on the legal basis of your consent (Art. 6(1)(a) GDPR). If you have given consent, you may withdraw it at any time. Sending us a plain email to that effect will be sufficient. Withdrawing your consent will not affect the legality of data processing operations that have already transpired.

Plug-ins and tools

YouTube

Videos from the website “YouTube” are embedded into this website. YouTube’s operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Whenever you visit one of our websites on which YouTube is embedded, you establish a connection to YouTube servers. This lets YouTube know which of our sites you’ve visited.
Moreover, YouTube may store various cookies on your end device. Those cookies help YouTube gain information on this website’s visitors. That information is used to collect video statistics, improve user-friendliness, and prevent attempted fraud, among other things. The cookies will stay on your end device until you delete them.
If logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube due to our interest in displaying our online services attractively.
This constitutes a legitimate interest as defined by Art. 6(1)(f) GDPR. If appropriate consent is requested, the processing will be performed on the exclusive basis of Art. 6(1)(a) GDPR and that consent may be revoked at any time.
Additional information on handling user data can be found in YouTube’s Privacy Policy under:
https://policies.google.com/privacy?hl=en-GB

Google web fonts

To present fonts uniformly, this site uses web fonts provided by Google.
When a site is visited, your browser will load the necessary web fonts into your browser cache so texts and fonts will be displayed correctly.
For this purpose, your browser must establish a connection to Google servers.
This informs Google that you have visited our website through your IP address.
The use of Google web fonts is based on Art. 6(1)(f) GDPR.
The website operator has a legitimate interest in having the typeface displayed uniformly on its website. If appropriate consent has been requested (such as consent to store cookies), the processing will occur on the exclusive basis of Art. 6(1)(a) GDPR and the consent may be withdrawn at any time.
If your browser does not support web fonts, a default font from your computer will be used.
You will find more information about Google web fonts under https://developers.google.com/fonts/faq and in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=en-GB

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA examines whether the data entered on this website (into a contact form, for example) was performed by a human being or an automatic program. To that end, reCAPTCHA analyses the behavior of the website visitor using various characteristics. That analysis will begin automatically as soon as the website visitor enters the website. When making the analysis, reCAPTCHA evaluates various information (such as the website visitor’s IP address, the length of their visit, or the user’s mouse movements). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data are analyzed and stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website services from abusive, automated spying, and from spam. If an appropriate consent is requested (a consent to store cookies, for example), the processing will be performed on the exclusive basis of Art. 6(1)(a) GDPR and that consent may be withdrawn at any time.
Additional information on Google reCAPTCHA can be found in the Google Privacy Policy and Google Terms of Service under the following links:
https://policies.google.com/privacy?hl=en-GB 
https://policies.google.com/terms?hl=en-GB

Personal data

Personal data are collected in the following cases:

Contact form

If you contact us through a contact form, the data you enter will be stored. We will use that data to answer your questions, process orders, or give you access to various services.
If you provide us with additional personal data, this is done on a voluntary basis.
Since we have a legitimate interest in offering you the optimal customer and prospect support within the framework of a (pre)-contractual relationship, we reserve the right to store and process your inquiry in a central prospect and customer support platform as well as pre-and post-sales systems for customer loyalty and sales purposes.

Special contact form: for downloading purposes, for example (such as whitepapers and e-books), registering for webinars

Various contact forms for different content are available on our website or on Yokogawa’s landing pages, which can be used to contact Yokogawa electronically. Users can use those forms to request offers, additional information, a return call, or documents for downloading; demand a service; and book trainings. If a user takes advantage of this possibility, the data entered into the input mask will be transmitted to us and stored. These data are:

• Form of address, title, first name, and last name
• Company
• Postal address
• Email address
• Telephone number
• The information you desire (such as an offer, additional information, or return call)
• Additional information about your needs and interests

To process the data, consent will be obtained during the dispatching procedure in accordance with Art. 6(1)(a) GDPR and this privacy policy will be referred to.
Supplement to data protection declaration webinars
As a participant in this webinar, the following data will be collected and processed from you: Name, first name, e-mail address, telephone number, company. We collect this data for organisational purposes (authentication/ data security of the participants) and for contact/postprocessing of our webinar. We keep this data for a period of 6 months. After this period they will be deleted. The collection and processing of your registration data (surname, first name, e-mail address) is based on a justified interest (Art. 6 Para. 1 lit. f) DSGVO). The use of your registration data including your contact data (e-mail, telephone number) for the purpose of contacting you is based on Art. 6 para. 1 lit. a) DSGVO (consent).

Newsletter

To order the newsletter, you must enter at least your email address. That email address will then be stored along with additional voluntary information such as your last name, first name, address, etc. We send newsletters only after appropriate registration (i.e., with your consent), on the basis of Art. 6(1)(a) GDPR.
You will register using a double opt-in procedure: after you register, you will receive an email asking you to confirm your registration to keep your email address from being misused. We will log those registrations for the newsletter so we can verify the registration process, and the consent it entails, in accordance with legal requirements. The registration is logged, and the data you entered when registering are processed as required, on the basis of our legitimate interests under Art. 6(1)(f) GDPR. You may at any time withdraw your consent to receive our newsletter (by unregistering from it, for example). You can exercise that right by clicking the “unregister” link found at the end of each newsletter.
We reserve the right to send personalised newsletters. This means: An interest profile is created for each subscriber by measuring and documenting their opening and clicking behaviour. We use that interest profile to create and send newsletters with specific prospective customers in mind. This allows us to send customized information purposefully, based on our legitimate interests under Art. 6(1)(f) GDPR.
When sending our newsletter, we use the services of mailingwork GmbH, headquartered in Oederan, Germany. mailingwork GmbH develops and sells email marketing, marketing automation software for content-based marketing, and other marketing services and products. To make our newsletter’s design as interesting for you as possible, mailingwork GmbH evaluates user behaviour on our behalf without drawing any conclusions about your identity or personal details. This lets us know which of our readers have opened our newsletter and which links have been clicked on frequently. To that end, we use technology in line with the market, such as tracking pixels embedded in our newsletter. The data is processed on the basis of our legitimate interest for the purposes of Art. 6(1)(f) GDPR: namely, our interest in analysing our newsletter and optimising its content.

Webinars via Cisco WebEx

We use Cisco WebEx as a platform for carrying out our webinars. You must consult the provider’s data privacy notice to learn the purpose and scope of data collection, how WebEx will continue to process and use the data, your rights in the matter, and how to change your settings to protect your privacy:
https://www.cisco.com/c/en_uk/about/legal/privacy-full.html

Data collection and use regarding the download of media

We collect personal data if you voluntarily disclose them to us as part of downloading a medium or while establishing contact with us (via a contact form or email, for example). Required fields are identified as such, since in these cases we need the data for processing the contact you establish and you cannot conclude the download or establish contact without disclosing those data. The respective entry form reveals what data will be collected. We use the data you disclosed in accordance with Art. 6(1)(b) GDPR to handle your requests. After your inquiry has been processed completely, your data will be restricted for further processing and deleted when the relevant retention periods under tax and commercial law expire, unless you have expressly given us your permission to use the data further or we reserve the right to use them beyond that point in a manner permitted by law and about which we inform you in this declaration.

Consent

If you grant us your consent to certain data processing operations, that consent is always given for a specific purpose, which will be revealed in the content of the declaration of consent in question. In this case, the data will be processed on the basis of Art. 6(1)(a) GDPR. Unless you give us your consent, we cannot comply with the request that requires it. If you give us your consent, you may withdraw it at any time, without affecting the legality of any processing performed on the basis of that consent before it was withdrawn.
Based on the consent you have granted, the companies listed in the declaration of consent may use the data to support individual or prospective clients and contact you about those purposes using the communication channels you request. We will use your data within those bounds, to make communicating with you as personal ad relevant as possible.
Which of your data are used to support individual and prospective clients depends particularly (but not exclusively) on which data are collected based on requests, orders, and consultation.

SSL or TLS encryption

This site uses an SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us since we are the site operator.
You can recognise an encrypted connection if the address line of your browser changes from “http://” to “https://” and the padlock icon is displayed in your browser line.
If SSL or TLS encryption has been activated, the data you transmit to us cannot be read by third parties.

Recipients of personal data

Internal recipients: Within Yokogawa Deutschland, access is given only to people who need it for the purpose specified on a case-by-case basis.
External recipients: We will forward your personal data to recipients outside of Yokogawa Deutschland only if this is necessary to fill your order or process your request, or we are otherwise permitted to do so based on a legal statute or your consent.
External recipients include the following without limitation:

a) Commissioned data processors
Yokogawa Germany GmbH or its affiliated companies, or external service providers that we use to render services. We select those commissioned data processors carefully and periodically inspect them to ensure that your personal data remain secure and confidential. Our commissioned data processors may use personal data only for the purposes we prescribe, and only on our instructions.

b) Public authorities
Authorities and government institutions (such as tax authorities, public prosecutors, or courts) to whom we (must) transmit personal data for compulsory statutory reasons or to protect legitimate interests. The transmission will then occur on the basis of Art. 6(1)(c) and/or (f) GDPR.

c) Private entities
Yokogawa operates a worldwide network of cooperating partners, service providers, and persons to whom data are transmitted based on consent, to execute a contract with you, or to protect legitimate interests, such as dealers, or providers of transport or other services. The transmission will then take place based on Art. 6(1)(a), (b), and/or (f) GDPR.

Data processing in third countries

Before transmitting any data to agencies that are headquartered, or who will process those data, in a country that is not a member state of the European Union or a Contracting Party to the EEA Agreement, we shall ensure that, except for exceptional cases allowed by law, the recipient has established an adequate level of data protection (through an adequacy resolution of the European Commission or by making suitable guarantees, such as by self-certifying that it participates in the EU-US Privacy Shield or by entering an agreement with EU standard contractual clauses of the European Union, for example) or that you have consented to the data transmission.
In this context, we would like to point out that in the case of data processing in countries outside the EEA – without an adequacy decision by the EU Commission – despite compliance with contractual obligations by our partner companies, there is not a high level of European data protection. The possible risks associated with a data transfer cannot be excluded. In particular, it may be that your data is subject to control and monitoring purposes by the authorities beyond the actual purpose and there is no effective legal remedy against these authorities, which enables you to make your data protection rights valid and sustainable to enforce.

Rights of the data subject

If personal data concerning you are processed, you are the data subject to the GDPR and will be entitled to the rights toward us described in the following. Please direct your requests to the controller specified above.
Right of access: You may request a confirmation that we are processing personal data concerning you, access to those data, and a copy thereof at any time and free of charge.
Right to rectification: You may demand rectification of any incorrect or incomplete personal data concerning you that are being processed.
Restriction of processing: You may demand that we restrict the processing of your personal data if one of the following conditions is met:

• You dispute the correctness of the personal data for a duration that enables us to check its correctness.
• The processing is unlawful, and you waive your right to have the data deleted, instead demanding that their use be restricted.
• We no longer need the personal data for their processing, but you need them to assert, exercise, or defend against legal claims.
• You have filed an objection against the processing under Art. 21(1) GDPR, and it has not yet been established whether our legitimate reasons override your reasons.

Erasure: You may demand that the personal data concerning you be erased without undue delay, provided one of the following grounds applies, and the processing is unnecessary:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing is based, and there is no other legal basis for the processing.
• You object to the processing under Art. 21(1) GDPR, and there are no overriding legitimate reasons for the processing, or you object to the processing under Art. 21(2) GDPR.
• The personal data were illegally processed.
• The personal data must be erased to fulfill a legal obligation under EU or Member State law to which we are subject.
• The personal data were collected regarding information society services offered under Art. 8(1) GDPR.

Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You may also have that data transmitted to a controller other than Yokogawa Deutschland GmbH without hindrance from us. In exercising this right, you may also have the personal data concerning you transmitted directly from us to a controller other than Yokogawa Deutschland GmbH insofar as this is technically feasible. Doing so must not impair the rights and freedoms of others.
Objection: You may object at any time to any processing of personal data concerning you that is based “only” on the legitimate interests of us or a third party (Art. 6(1)(f) GDPR). If you raise such an objection, we will cease processing the personal data concerning you unless we can verify compulsory legitimate grounds for the processing that override your interests, rights, and freedoms or if those data are being processed to assert, exercise, or defend against legal claims.
Withdrawal of consent: You can withdraw your declaration of consent under data protection laws at any time. Withdrawing your consent will not affect the legality of processing that has already occurred based on your consent.
To assert your rights, please contact Yokogawa Deutschland GmbH, since, besides being the controller, they will also exercise your rights. You can also contact the data privacy officer, especially if your request requires strict confidentiality:

datenschutz@de.yokogawa.com
– BECHTLE Datenschutz Competence Center –
Bechtle GmbH IT-Systemhaus
Parkstraße 2-8, 47829 Krefeld

Source (partially): https://www.e-recht24.de/