Privacy Statement

You may withdraw consent at any time with effect for the future. Cookie choices can be changed through the cookie settings, and newsletters can be cancelled using the unsubscribe link. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. An objection to direct marketing applies without any further balancing of interests.

We may transfer personal data to recipients outside the European Economic Area (EEA) only where the requirements of Arts. 44 et seq. GDPR are met. Depending on the recipient, this may be based on an adequacy decision, a valid certification under the EU US Data Privacy Framework, or appropriate safeguards such as the EU Standard Contractual Clauses, together with supplementary measures where required. Information about recipients and safeguards is available from privacy@apsensing.com.

AP Sensing strives to keep your personal information accurate. We will provide you with access to your personal information, including making every effort to provide you with online access to your registration data so that you may review, update or correct your information at the AP Sensing site where it was submitted. To protect your privacy and security, we will also take reasonable steps to verify your identity before granting you access or enabling you to make corrections. If you cannot access your information on the web page, please telephone AP Sensing for assistance, or send your request to privacy@apsensing.com.

As an ISO 27001-certified company, AP Sensing implements appropriate technical and organizational measures under Arts. 25 and 32 GDPR to provide a level of security appropriate to the risk. These measures include access and authorization controls, encryption in transit, confidentiality obligations, backups and regular security reviews. Absolute security of electronic communications cannot be guaranteed; unencrypted e-mail in particular may involve risks.

We retain personal data only for as long as required for the relevant purposes and legal bases. Relevant criteria include the duration of an inquiry, consent, contract or business relationship, the lifecycle of our products, statutory retention and limitation periods, and the establishment, exercise or defence of legal claims. Where required for product, project, support or traceability purposes, certain customer, supplier, order and project data may be retained for up to 30 years after the contractual relationship ends or the last order is received; ordinary contact data is not retained for the entire period merely for that reason.

When the purpose ceases and applicable periods expire, we delete or anonymize the data. Where immediate deletion from backups is technically impossible, the data is isolated from further operational use until scheduled overwriting. Specific periods for website, form and marketing processing are stated in the relevant sections below.

We use CookieHub to manage and document your cookie choices. Processing is necessary to comply with our accountability obligations and for legally compliant, user-friendly consent management (Art. 6(1)(c) and (f) GDPR). Strictly necessary storage and retrieval of your choice is based on section 25(2) TDDDG. Your consent to optional technologies is the legal basis for activating those technologies and the subsequent data processing.

• a unique string of characters that is stored in a CookieHub cookie in your browser along with the cookie category settings. This token can be requested by you to find the entry from the consent log and demonstrate your consent choices.
• the full URL displayed by you when the cookie settings were configured in the CookieHub widget
• a reference to the version of the widget that was displayed at the time you gave consent
• your anonymized IP address, with the last part of the IP address replaced by a 0 to avoid the risk of identifying personal data
• the registered country code for the anonymized IP address block
• your agent string, which usually contains browser and operating system information
• the date and time of your consent

When CookieHub is used, consent and technical data collected through our website is transmitted to CookieHub ehf., Hafnargata 51-55, 230 Reykjanesbaer, Iceland, acting as our processor. 

CookieHub stores your choice on your terminal device and in a consent log so that it can be respected on later visits and demonstrated. Consent-log data is retained only for as long as necessary to document and demonstrate consent choices and to meet applicable accountability requirements. You may change your choice at any time through the cookie settings.

When accessing our website for the first time or afterwards by adjusting the Consent Management Tool, you can review the cookies settings, decline cookies completely or withdraw afterwards your previously given consent to specific cookies only.

To protect our forms and double-opt-in processes from automated submissions, we use Friendly Captcha, provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, acting as our processor. Technical connection, environment, interaction and functional data is processed; according to the provider, the IP address is anonymized by one-way hashing before storage. The legal basis is our legitimate interest in the security and functionality of our forms (Art. 6(1)(f) GDPR). Where strictly necessary information is stored on or read from the terminal device, section 25(2) TDDDG applies. Further information: https://friendlycaptcha.com/legal/privacy/.

If you create a customer or partner account, we process in particular the contact name, e-mail address, company, product serial number, login credentials and, optionally, company address and telephone number. Processing is necessary to set up and administer the account and provide firmware, updates and other requested services (Art. 6(1)(b) GDPR; additionally Art. 6(1)(f) GDPR for secure and efficient portal operation). Accounts are maintained during the active business relationship and reviewed at least annually for continuing authorization. When authorization ends, access is deactivated immediately and account data is generally deleted within 30 days and no later than three months, unless another legal basis requires continued retention.

If you request product information, operating instructions or other materials through our website, we process the data entered in the form. Mandatory fields are salutation, first and last name, country, e-mail address, company and company website; title is optional. The data is transmitted through SULU and processed in Microsoft 365/Outlook and the protected SharePoint location. To submit the request and access the download, you must actively consent to the processing of these data for providing the
requested information and for contacting you in connection with your request. We use the data to provide the requested documents and handle the specific inquiry. The legal basis is your consent for this purpose (Art. 6(1)(a) GDPR) or, where the inquiry concerns specific pre-contractual steps or an existing contractual relationship, Art. 6(1)(b) GDPR.

Based on your consent, Marketing or Sales may contact you in connection with the requested materials and related products. Such follow-up contact is limited to no more than two contacts. You may withdraw your consent at any time with effect for the future.

Data collected through download and contact forms is retained for as long as necessary to process the request and any resulting business contact. It is then deleted or anonymized in accordance with our documented retention periods, unless statutory retention obligations, limitation periods or another legal basis require longer retention.

If you request product information, operating instructions or other materials through our website, we process the data entered in the form. Mandatory fields are salutation, first and last name, country, e-mail address, company and company website; title is optional. The data is transmitted through SULU and processed in Microsoft 365/Outlook and the protected SharePoint location. To submit the request and access the download, you must actively consent to the processing of these data for providing the requested information and for contacting you in connection with your request.

We use the data to provide the requested documents and handle the specific inquiry. The legal basis is your consent for this purpose (Art. 6(1)(a) GDPR) or, where the inquiry concerns specific pre-contractual steps or an existing contractual relationship, Art. 6(1)(b) GDPR. Based on your consent, Marketing or Sales may contact you in connection with the requested materials and related products. Such follow-up contact is limited to no more than two contacts. You may withdraw your consent at any time with effect for the future. Data collected through download and contact forms is retained for as long as necessary to process the request and any resulting business contact. It is then deleted or anonymized in accordance with our documented retention periods, unless statutory retention obligations, limitation periods or another legal basis require longer retention.

For newsletter distribution, we use Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, United States (an Intuit company). The data processed includes e-mail address, name, company, country, interests, consent records and opening and click data. Opening and click tracking is enabled to measure newsletter performance and improve our communications. Mailchimp acts as our processor for newsletter distribution. The applicable data-processing agreement is in place. Transfers to the United States are covered by the EU-US Data Privacy Framework and, where applicable, the EU Standard Contractual Clauses. Further information: https://mailchimp.com/legal/privacy/.

We may invite customers and partners by e-mail to customer or brand surveys and process responses in Mailchimp or our CRM. The legal basis is generally our legitimate interest in improving our products and services (Art. 6(1)(f) GDPR); where the invitation or analysis requires consent, Art. 6(1)(a) GDPR applies. You may object to the invitation at any time. The data is reviewed at least annually and deleted when no longer required for the survey and lawful customer care.

If you provide your data to us at a trade fair or through a business contact, we process in particular your name, company, professional contact details, function, country and the circumstances of the contact to pursue a potential business interest (Art. 6(1)(f) GDPR). We use the data for electronic promotional messages only with consent or where a statutory exception applies. Raw data from trade-fair lead tools is generally deleted within 90 days after the fair ends or the data is transferred. Other lead data is reviewed according to the documented contact status and deleted no later than the end of the defined retention period.

Our website contains image links to Facebook/Meta and LinkedIn. No connection is established through such a link until you click it. After clicking, you leave our website; Meta Platforms Ireland Limited or LinkedIn Ireland Unlimited Company is primarily responsible for the subsequent processing under its own privacy policy. Processing may include transfers to third countries. Further information:under https://www.facebook.com/privacy/policy  and https://linkedin.com/legal/privacy-policy.

We currently host videos directly on our website and do not use embedded YouTube videos. Where we provide image or text links to YouTube, no connection to YouTube is established until you click the link. If embedded YouTube content is used in the future, it will be integrated in privacy-enhanced mode and loaded only after your consent. Google Ireland Limited is responsible for the subsequent processing by YouTube. Further information: https://policies.google.com/privacy.

We use Google Analytics 4 (GA4), provided by Google Ireland Limited, to measure audience use and improve our website. GA4 is activated only after your consent (Art. 6(1)(a) GDPR; section 25(1) TDDDG additionally applies to storing or reading cookie IDs). Data processed includes pages visited, duration, browser and device category (laptop, tablet or smartphone), cookie IDs and other online identifiers, and approximate location (country, region and city). The IP address is used for transmission and derivation of approximate location; Google states that IP addresses of EEA users are not logged or stored. The configured retention period for user-level and event-level data is 14 months and is not reset by new activity; aggregated reports may remain available for longer. Google Signals and advertising features are disabled, and GA4 is not linked to Google Ads or our CRM. You may withdraw consent at any time through the cookie settings. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/12017362.

We use Google Tag Manager (GTM), provided by Google Ireland Limited, to manage and control website tags. GTM does not itself create independent user profiles, but services deployed through it may process personal data. The legal basis, data categories and consent requirements depend on the relevant service deployed through Tag Manager. In particular, GA4 is activated only after consent as described above. Further information:r: https://developers.google.com/tag-platform/tag-manager?hl=en and https://policies.google.com/privacy.