Privacy Policy

1. Responsibility and contact:

Responsible for the processing of your data when visiting the website http://www.hitachi-hightech.com/eu/ and when using services offered
Hitachi High-Tech Europe GmbH
Europark Fichtenhain A 12
47807 Krefeld
Germany

2. Contact Data Protection Officer

You can contact the data protection officer of Hitachi High-Tech Europe GmbH at hte.dsb@verdata.de or by post at Data Protection Officer
Hitachi High-Tech Europe GmbH
Europark Fichtenhain A 12,
47807 Krefeld,
Germany.

3. Your rights

You have the right to information about your data stored by Hitachi High-Tech Europe GmbH at any time and, if the legal requirements are met, you have the right to correct, block or delete your data as well as the right to transfer data provided by you digitally.

If processing by Hitachi High-Tech Europe GmbH is based on a justified interest in accordance with Art. 6 Para. 1 f) GDPR, you can object to this processing for reasons arising from your particular situation. Hitachi High-Tech Europe GmbH will only process the data if there are demonstrably compelling reasons for doing so which are worthy of protection and which outweigh your interests, rights and freedoms or if the processing is necessary for the assertion, exercise or defense of legal claims.

You can assert your rights against Hitachi High-Tech Europe GmbH by e-mail to HTE-Datenschutz@hitachi-hightech.com or in writing to the address given above.

In addition, you can complain about the processing of your data at any time to the data protection officer of Hitachi High-Tech Europe GmbH under the contact details provided.

You also have the right to contact any data protection authority. A list of the supervisory authorities (for the non-public area) with addresses can be found at: https://www.bfdi.bund.de/ZASt/EN/Home/home_node.html.

The supervisory authority responsible for Hitachi High-Tech Europe GmbH is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Düsseldorf, Telephone: +49 (0)211/38424-0, Fax: +49 (0)211/38424-10, E-Mail: poststelle@ldi.nrw.de, Homepage: http://www.ldi.nrw.de.

We reserve the right to change this privacy policy at any time with effect for the future. A current version is available on the website. There will be no separate notification of changes.

4. Data processing when visiting the website

Whenever a page is called up, server log files (IP address, name of the file called up, date, time of the call, amount of data transferred, status of the call (successful (unsuccessful)), browser type and operating system of the end device and the URL of the page called up in each case (so-called "referrer URL") are processed. The collection is pseudonymized and is used to generate anonymous information about the way the site is used, to improve continuously the website and to tailor the content better to the users. The processing is based on our predominant legitimate interest according to Art. 6 para. 1 f) GDPR.

The data required to provide the website will be deleted when the respective session is ended. The server log files are stored for a maximum of 7 days and then deleted. We reserve the right to check the server log files if there are concrete indications of illegal use. Data whose further storage is required for evidential purposes will remain stored until the respective incident has been finally clarified.

For the operation and maintenance of our website, we use technical service providers who act as our contract processors.

5. Data processing when using various services

Various services and interactions are offered via the website. In most cases, data is only processed if you use the respective service. To what extent and for what purpose data is processed is described separately for each service below.

If you contact us via a contact form offered on our website, we will process the information you provide for the purpose of individual communication with you and exclusively for processing your request. The processing is carried out on the basis of Art. 6 para. 1 f) GDPR. If you contact us to request an offer, the data you enter will be processed for implementing pre-contractual measures in accordance with Art. 6 Para. 1 b) GDPR.

For the operation and maintenance of our website, we use technical service providers who act as our contract processors. In addition, in certain cases it may be necessary to forward inquiries including personal data to the relevant Hitachi Group companies so that they can respond to you directly. The data will only be passed on with your consent in accordance with Art. 6 Par. 1 a) GDPR.

Your personal data will be deleted after the process is completed. If a contractual relationship is established with us, the data is subject to the legal obligation to retain it (six or ten years).

Webinars are interactive online workshops held over the internet. We process personal data for the purpose of conducting webinars. The exact scope of the data processing depends on the data you provide before or during participation in a webinar. In particular, these data include your user data (e.g., surname, first name, telephone, e-mail), chat entries and history, shared screen contents as well as usage data (e.g., webinar data incl. display name, participation times and duration) and technical data (e.g., IP address, information on the terminal device used, hashed passwords) as well as voice and video data. Your data will be stored for a maximum of six (6) months after collection.

The data processing is necessary for the preparation (registration) and implementation of webinars in accordance with Art. 6 para. 1 b) GDPR. If we evaluate the event data, this is carried out in accordance with Art. 6 para. 1 f) GDPR based on our legitimate interest in the continuous improvement of the services offered as well as system security and stability. On the same legal basis, we use your user data for advertising purposes for our own products, whereby a corresponding interest in our products and services can be assumed through your participation. Your personal data will not be used for any other purposes unless you expressly consent to its use for further purposes.

We use software offered by various service providers, depending on the event. These act for us as processors within the meaning of Art. 28 GDPR and are therefore subject to the applicable EU data protection regulations. An adequate level of protection for providers in third countries is ensured by the existence of an adequacy decision of the European Commission in the recipient country or the agreement of EU standard data protection clauses.

The software solutions selected may be the following:

• “edudip” by the company edudip GmbH
  (registered office: Aachen (DE), https://www.edudip.com/de/datenschutz)
• “Microsoft Teams” by the company Microsoft Corporation
  (registered office: Redmond, Washington (USA), https://privacy.microsoft.com/de-de/privacystatement)
• “WebEx” by the company Cisco Systems, Inc.
  (registered office: San Jose, Kalifornien (USA), https://www.cisco.com/c/en/us/about/legal/privacy-full.html)

Participation in our online surveys is voluntary. You can decide for each survey whether you want to participate and what information you want to give us. For each participation, at least your IP address, the time of participation and the answers you give are processed. Your IP address is only stored in a non-reverse-encryptable hash on the survey server after automatic encryption and cannot be read. After the survey is completed, the hash is deleted.

If you participate in a survey, the aforementioned data will be processed on the basis of our legitimate interest in the continuous development and improvement of the quality of our products and service pursuant to Art. 6 (1) f) DSGVO.

In individual cases, we ask for your express consent to process personal data for a specific purpose in the context of online surveys (for example, to be able to contact you). In this case, the processing of your personal data is based on Art. 6 (1) a) DSGVO. If you give us your consent, you can revoke it at any time and without giving reasons for the future. The processing that took place until the time of your revocation remains lawful in this case. Your data will be deleted as soon as the purpose of the survey has been achieved; we will inform you of this in individual cases as part of the consent management process.

If cookies are used in our survey tool, this will only be done if you have expressly consented to this in advance. You will receive information on the cookies that may be used in this context as part of the consent management for the respective survey.

For our surveys, we use the online survey tool easyfeedback from our service provider easyfeedback GmbH (Ernst-Abbe-Str. 4, 56070 Koblenz, Germany), which is integrated as a data protection compliant processor.

Hitachi High-Tech Europe GmbH operates an online presence on www.linkedin.com.

For this purpose, we use the services of the technical platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).

The use of this contact is not necessary to get in touch with us or to receive information about our company or our products. Corresponding information is also available via our website www.hitachi-hightech.com.

We point out that you use the service offered under LinkedIn and its functionalities on your own responsibility. This applies in particular to the use of interactive functions, such as sharing.

LinkedIn is in principle solely responsible for the processing of personal data when visiting our LinkedIn page. Further information about the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy. When using LinkedIn pages, LinkedIn sets cookies to identify you when using their services, to retrieve your settings and to ensure the functionality of their own services. These cookies are set for both registered users and "guest visitors" and cannot be disabled.
In addition, other cookies are set optionally, i.e., your consent is obtained for this in advance. You can find more information on this at https://de.linkedin.com/legal/l/cookie-table.

When you visit, follow, or interact with our LinkedIn company page, LinkedIn processes personal data to provide us with statistics and insights in an anonymized form. This provides us with knowledge about the type of actions that people take on our page (so-called page insights). For this purpose, LinkedIn processes in particular data that you have provided to LinkedIn, for example, via the information in your profile. In addition, LinkedIn processes information about how you interact with our LinkedIn company page; for example, whether you are a follower of our LinkedIn company page. With the Page Insights, LinkedIn does not provide us with any personal data about you; we only have access to the aggregated Page Insights. It is also not possible for us to draw conclusions about individual persons via the information of the Page Insights.

The processing of personal data in the context of Page Insights is carried out by LinkedIn and us under joint responsibility. The processing of page insights by us is carried out to optimize the promotional presentation of our quality as an employer. The legal basis for this is Art. 6 (1) f) DSGVO, whereby the purpose of the processing also represents our legitimate interest.

We have reached an agreement with LinkedIn on processing as joint controllers, which specifies the distribution of data protection obligations between us and LinkedIn:

• LinkedIn is responsible for enabling you to implement your rights as a data subject under the GDPR. For contacts, you can use the link https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de. You can find further contact options in the LinkedIn Privacy Policy. You can contact LinkedIn's data protection officer using the link https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
• You may also contact us regarding processing carried out under joint responsibility with LinkedIn. Please address such requests to HTE-Datenschutz@hitachi-hightech.com or in writing to Hitachi High-Tech Europe GmbH, Data Protection Officer, Europark Fichtenhain A 12, 47807 Krefeld, Germany.
• In addition, it has been agreed with LinkedIn that the Irish Data Protection Commission is the lead supervisory authority monitoring the processing for Page Insights. You have the right to lodge a complaint with the Irish Data Protection Commission (https://www.dataprotection.ie/) or also any other data protection supervisory authority at any time.

The agreement can be accessed at https://legal.linkedin.com/pages-joint-controller-addendum.

Please note that according to the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the U.S. or other third countries. LinkedIn states that it only transfers personal data to countries for which an adequacy decision has been issued by the European Commission pursuant to Article 45 of the GDPR or on the basis of appropriate safeguards pursuant to Article 46 of the GDPR.

We are responsible under data protection law if you contact us via our LinkedIn company page. We use the data solely for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for this is our legitimate interest in responding to your request in accordance with Art. 6 (1) f) DSGVO. If your contact is aimed at the conclusion of a contract, Art. 6 (1) b) DSGVO applies as the legal basis, if necessary in conjunction with § 26 BDSG. Your data will be deleted by Hitachi High-Tech Europe GmbH after processing has been completed unless there are legal obligations to retain the data.

With your express consent, we use the conversion tool "LinkedIn Insight Tag". This tool creates a cookie in your web browser. The cookie collects, among other things, your IP address, the URL of the website accessed and the Refferer URL as well as device and browser properties. This data is anonymized by LinkedIn within seven days. The anonymized data is deleted within 90 days. LinkedIn does not share any personal data with us; we receive anonymous reports about the demographics of our audience and the performance of our ads. In addition, the Insight Tag enables us to retarget. Using this data, we can display targeted ads outside of our website without identifying you as a website visitor.

The legal basis for the use of the LinkedIn Insight Tag is your consent pursuant to Art. 6 (1) a) DSGVO in conjunction with Section 25 (1) TTDSG. You can revoke your consent for the future at any time via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

6. Website analysis and online marketing

We use various analysis services and online marketing tools that process data to different extents and for different purposes. If your consent is required for individual processing operations, you can give it to us during your first visit to the website via the Consent Bar that appears.We use the Consent Management Platform from OneTrust to manage your consents and objections.The use of the Consent Management Tool is in our overriding interest pursuant to Art.6 (1) f) DSGVO to implement and demonstrate compliance with legal obligations.If you consent to the use of a tool listed in the Consent Bar, the processing is based on Art.6 (1) a) GDPR in conjunction with Section 25 (1) TTDSG. The legal basis for technologies that we classify as essential for the operation of the website is Section 25 (2) TTDSG. You can find detailed information about cookies under Cookie Settings.Via Cookie Settings, you can also check your selection at any time and change it for the future.

We use the Google Tag Manager (provider: Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland) to classify and categorize information and conversion pixels. This service enables the management of website tags (labels for classification / categorization) via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. However, the Google Tag Manager does not access this data. If the Tag Manager is disabled at the domain or cookie level, the disablement remains valid for all tracking tags implemented with Google Tag Manager.

We use Adobe with Omniture® technology (Adobe Analytics (Omniture), a web analytics service from Adobe Systems Incorporated (345 Park Avenue, San Jose, CA, 95110-2704, USA) and Adobe Dynamic Tag Manager to manage tags). Adobe with Omniture® technology uses cookies and "clear GIFs", transparent graphics that allow analysis of your use of the website. The information generated by the cookies and clear GIFs about your use of our websites is typically transferred to and stored on an Adobe server in the United States or another country where Adobe has offices. Adobe uses this information on behalf of Hitachi High-Tech Europe GmbH to evaluate your use of the Site, to compile reports on Site activity and to provide other services to Hitachi High-Tech Europe GmbH related to Site and Internet usage. Some of the cookies are session cookies that expire when you close your web browser. Other Adobe cookies expire after 2 months or 2 years.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Adobe from collecting the information (including your IP address) generated by the cookie / Clear GIF that is related to your use of the website and processing this information by Adobe by using the opt-out option at the bottom of the following website: http://www.omniture.com/en/privacy/product#optout.

We use on our website the web analytics service Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - "Google"; in the European Economic Area and Switzerland represented by Google Ireland Limited (Gordon House, Barrow Street, 4 Dublin, Ireland). Google Analytics uses cookies that enable an analysis of your use of the website. The cookie transfers the generated information about your use of the website, usually to a Google server in the USA, where it is stored. The website makes the IP address anonymous, which means that your IP address will be shortened or masked by Google if you are located within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. The complete IP address is transmitted to a Google server in the USA only in exceptional cases, where it is shortened. Google will use this information on behalf of Hitachi High-Tech Europe GmbH to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser in the context of Google Analytics is not combined with other data from Google. The cookies set by Google Analytics expire after 24 hours or 2 years.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing the information generated by the cookie about your use of this website (including your IP address) by downloading and installing the browser plugin available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies.

Our website uses Google Analytics Audience ("GA Audience"), a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). GA Audience uses, among other things, cookies that are used for cross-device analysis of the use of our website. GA Audience has access to the cookies created by Google Analytics. During use, personal data such as IP address and user activity may be transmitted to a Google Inc. server and stored there. Google Inc. may also transfer this information to third parties.

You can prevent the collection and transmission of personal data (in particular your IP address) and the processing of this data by deactivating the execution of JavaScript in your web browser or by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=de

We use the Hotjar website analysis service of Hotjar Ltd (Level 2, St. Julians Business Centre, 3, Elia Zammit Street, St. Julians STJ 1000, Malta, Europe). With this service, we can track movements on our websites (so-called heat maps) and recognize how far users scroll and which buttons they click on how often. This helps us to make our websites more user-friendly, more valuable and easier for the users to use. When you use our websites, your IP address and usage and device data are collected, anonymized, stored and processed by Hotjar. Since Hotjar uses various services of third party providers such as Google Analytics, it cannot be ruled out that these third party providers may obtain knowledge of your IP address within the scope of web page requests or that they may store cookies on your computer.

You can prevent Hotjar from collecting your data by following the instructions for installing a "Do Not Track" header on https://hotjar.com/legal/compliance/opt-out/ For more information about Hotjar's usage and privacy policies, please visit. https://www.hotjar.com/legal/policies/privacy.

We continue to use the remarketing function Dynamic Remarketing and the online marketing tool DoubleClick, (provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Both features use cookies to deliver ads relevant to users, improve campaign performance reports, or prevent users from seeing the same ads more than once. Google uses a cookie ID to help identify which ads are served on which browser, so it can prevent them from being shown more than once. Google may also use cookie IDs to track conversions related to ad requests. The remarketing feature also enables Google to show visitors ads related to content that visitors have previously viewed on other websites that also use Google's remarketing feature. According to Google, DoubleClick cookies do not process any personal data, but your browser automatically establishes a direct connection with the server of Google Inc. when you visit our websites; at least your IP address is transmitted to Google Inc. Through the integration of Google Dynamic Remarketing and DoubleClick, Google also receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google, it is possible that Google will store your IP address and use it for its own purposes. Hitachi High-Tech Europe GmbH has no influence on the scope and further use of the data collected and stored by Google with this tool.

If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google at www.google.com/ads/preferences. You can also prevent the installation of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website fully.

We continue to use Yahoo retargeting technologies (provider: Verizon Media EMEA Limited, 5-7 Point Square, North Wall Quay, Dublin 1, Ireland) These technologies allow us to use cookies and tracking pixels to serve ads on our Web sites and on third-party Web sites. The information generated by these technologies (including your IP address) is typically sent to a Verizon Media server in Ireland, where it is stored.

Through the integration of Yahoo Remarketing, Verizon Media may store your IP address and usage patterns, link it to our own data, and use it for our own purposes. Hitachi High-Tech Europe GmbH has no influence on the scope and further use of the data collected and stored by Google with the use of this tool.

For more information on data processing by Verizon Media, please visit https://www.verizonmedia.com/policies/ie/de/verizonmedia/privacy/index.html.

7. Social plug-ins

Our sites allow you to publish content that interests you in various social networks on the Internet:

• "Facebook" and "Youtube" button of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
• "Tweet" button from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA;
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA;

You can recognize the offers by the logos on the websites of the social internet networks. To give you full data control, the buttons used only establish direct contact between the respective social network and the visitor when you actively click on the button. By activating the Social Media Plugin, the following data can be transmitted to the social media providers: IP address, browser information, operating system, screen resolution, installed browser plug-ins such as Adobe Flash Player, origin of visitors when they follow a link: (referrer) URL of the current website. The next time you visit our website, the social media plug-ins will again be provided in the default inactive mode, so that no data is transmitted if you visit the website several times.

Our websites only allow you to connect to the respective Internet networks. The respective provider will inform you about the purpose and scope of data collection and use as well as your rights and setting options for data protection in their data protection declarations.

9. Transmission to recipients outside the European Economic Area

Some of the recipients of the data may be located outside your country or may process your personal data. The level of data protection in other countries may not be the same as in your country. However, Hitachi High-Tech Europe GmbH only transfers data to countries for which the EU Commission has decided on an adequate level of data protection. Alternatively, Hitachi High-Tech Europe GmbH will take the necessary data protection measures to ensure that all recipients comply with an adequate level of data protection.

10. Data transfer to third parties

Hitachi High-Tech Europe GmbH passes on personal data to third parties under the following conditions:

• In order to fulfill the purpose of contracts with affiliated companies and subsidiaries in accordance with Art. 6 para. 1 lit. b GDPR, Hitachi High-Tech Europe GmbH will only pass on personal and non-personal data to its affiliated companies and subsidiaries worldwide if this is necessary to fulfill the purposes for which it was collected and for as long as this is necessary. The term "affiliated companies" or "subsidiaries" refers to group companies that are named, jointly owned or controlled by Hitachi;
• To third party providers integrated in accordance with the data protection provisions of Art. 28 GDPR, which Hitachi High-Tech Europe GmbH commissions from time to time to provide services.

In special cases, we may pass on personal data to third parties,

• if this becomes necessary to comply with legal requirements due to court orders or other orders by government or enforcement authorities (Art. 6 para. 1 lit. c GDPR);
• in connection with a group event, such as a merger, transfer, restructuring or sale of all or part of the business operations of Hitachi High-Tech Europe GmbH (including an entity or subsidiary), in which Hitachi High-Tech Europe GmbH is obliged to disclose information to a potential buyer and its professional advisors (Art. 6 para. 1 lit. f GDPR),
• to enforce our contractual rights, to take precautions against liability, to investigate suspected or actual illegal acts or to defend ourselves against claims or allegations by third parties (Art. 6 para. 1 lit. f GDPR)
• to protect the rights, personal safety or property of our customers or the public (Art. 6 para. 1 b, c, f GDPR)

11. Links to business partners

The Hitachi High-Tech Europe GmbH websites contain various quick links to other Hitachi companies worldwide, e.g. to the Hitachi Group's global application portal, as well as to companies outside the Hitachi Group. In such cases, Hitachi High-Tech Europe GmbH is not responsible for the operation of these sites.

Hitachi High-Tech Europe GmbH merely provides the link to these sites. Hitachi High-Tech Europe GmbH is not responsible for the collection or storage of data when you visit these sites or enter data there. The respective site operators provide information about the purpose and scope of data collection in their legal notices.

12. Data protection

Your personal data will be transmitted via the Internet using website forms to the servers of Hitachi High-Tech Europe GmbH. The transmission is protected. Hitachi High-Tech Europe GmbH uses the SSL/TLS transport protocol. E-mail notifications from our servers are sent with STARTTLS encryption. Thus, your data is sufficiently protected against unauthorized access during transport.

The entire IT is subject to a separate IT security concept. Servers and networks are protected against unauthorized access by up-to-date IT security components. Furthermore, data processing within Hitachi High-Tech Europe GmbH is subject to a data protection concept. The concept specifies the legal requirements of the European Basic Regulation (GDPR).

Status: September 2023