Privacy Policy U.S.

Version: August 2019

Scope
This privacy policy covers visitors to the Elma Electronic AG ("Elma") website and users of our Elma products and services (the “Services”) including customers’ authorized users.
Elma, as the provider and the responsible entity (“Elma” "We" “Us” or “Our”) of the website www.elma.com and related domains (the “Site”), takes the obligation of data protection very seriously and designs its website, in such a way that personal data is only to the extent necessary, collected, processed and used. Under no circumstances shall personal data be leased or sold to third parties for advertising purposes. No personal data shall be used for third party advertising or third party marketing purposes without the express consent of the visitor.

Amendments to the purpose of the processing and data usage
Due to technical progress and organisational changes, the deployed processing methods may change and further develop, Elma reserves the right to further develop this data protection statement pursuant to the new technical framework conditions. Elma therefore requests you to check on Elma’s data protection statement, from time to time. If you use the Services, we will also endeavor to email or otherwise communicate changes to this policy.

Data Collection
Site Visitors:
If you sign up for more information, the information you provide in the form will be sent to us. We use that information to respond to you and provide ongoing information about our services.
We also track statistics in aggregate across our site (we currently use Google Analytics, whose terms of service for US users and privacy policy can be found here), in order to provide better quality of service, and we may sometimes share that data in aggregate. You can also opt-out of Google Analytics here. We make use of third-party software to do so but we do not provide such third-party software providers with any of your personal information.
We also use cookies (a small text file placed on your computer to identify your computer and browser) and Web beacons (a file placed on a website that monitors usage) to improve the experience of our site. You can reset your Web browser to refuse all cookies or to indicate when a cookie is being sent.
Log Files. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use the website or platform and record such information in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the website, browser type and settings, the date and time the website was accessed, information about browser configuration and plugins, language preferences and cookie data.
This information is analysed for our business purposes, such as marketing, site optimization, and content development.

Job Applicants
If you visit our website to apply for a job, we receive all the data you enter as part of your application. As of the date of this policy, we use theapplicantmanager.com to manage job applications. Their privacy policy is here.

Export and processing of data in States outside of the European Economic Area
We currently operate in several countries around the world (including the United States) and store and transfer data outside of the EU.

Data Hosting
We currently use third parties (Rackspace) to store data on premises and in the future we may use a cloud-based service like Microsoft Azure.

Payment Processing
In order to process your payment, Elma uses a payment processor to process your payment. In order to do that, Elma will send to the processor, and the processor will receive, the payment information that you provide. The payment process is responsible for all onward transfers of personal information to third parties in accordance with the EU-U.S. Privacy Shield Framework, the Swiss-U.S. Privacy Shield Framework, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). We currently use authorize.net and it’s payment processor functionality through a plug-in to SiteCore.

External Links
Elma’s Site contains links that refer to third-party websites. We have no influence on the content and design of these websites of other providers. Therefore, the guarantees of this data protection statement do not apply to external providers.

Google Analytics
We use analytics, including Google Analytics, to improve our Sites and Services. As part of our privacy by design efforts, we use Google Analytics with the extension "_anonymizeIp ()". As a result, the IP addresses are processed only truncated to exclude a direct personal inference.
“Google Analytics uses so-called “cookies”, text files that are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your IP address) shall be transmitted to and stored by Google on servers in the United States. Google shall use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Google shall never associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; However, please be aware that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.”

YouTube
Our Sites have a YouTube plug-in. When you load videos on our Sites, information is sent to YouTube (in part so they can send you the video content) and if you are logged in, that information is more readily identifiable. YouTube’s privacy policy is here.

Google Ads
Elma uses Google Ads to attract attention to their attractive offers with the help of advertising materials on external websites. Google Ads cookies usually lose their validity after 30 days.

Facebook and Instagram Plug-Ins
We use facebook and Instagram plugins, which mean that facebook receives activity information of visitors to our Site, and for users who are facebook users and logged in to facebook that information is more readily identifiable. Facebook’s privacy policy is here.
Instagram receives information about your access of the Sites regardless of whether you have an Instagram account or are logged in. The Instagram privacy policy is here. You can also completely prevent the loading of Instagram plugins, with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Twitter
Our cookies enable behavioural advertising and analytics by Twitter, which are described here. You can change your data protection settings on Twitter in the Account Settings here.

LinkedIn
We use LinkedIn plug-ins. The cookies are used for tracking campaign analytics and behavioural advertising by LinkedIn. Your interaction with this feature will be governed by the privacy policy of the LinkedIn company here. You can change your data protection settings on LinkedIn.

Marketo
Elma uses the services of Marketo (whose privacy policy is here) to send newsletters and mailings to customers and potential customer. Marketo is a marketing automation tool used by us to automate internal marketing processes,to manage advertising permissions and data on the use of the Sites, and to optimize our offerings accordingly. You can prevent the cookies from being saved by modifying your browser settings accordingly. And you can effectively prevent tracking if you deactivate the display of images by default in your email program. In this case, the newsletter is not completely displayed and the user may not be able to use all the features. Marketo Munchkin code allows the Site to track your (from anywhere) behaviour on the sites on which the cookie is installed and to link a visitor to the recipient of a marketing campaign, which we use to measure campaign effectiveness. Tracking is performed without associating you to a nameuntil you submit a form. Marketo forms used on the Sites enables us to respond tocustomer requests for orders and information and call back inquiries.

Customer Relationship Management
We use a CRM (currently Dynamics 365) to help us store and organize customer data. This includes purchase history, newletter subscriptions, and service issues. Dynamics 365’s privacy policy is here. And we use Sitecore as a Content Management System.

Do Not Track
Elma does not respond to Do Not Track signals that you set in your browser.

Your California Privacy Rights
If you are a California resident, you can request information regarding the disclosure of your personal information by Elma to third parties for the third parties’ direct marketing purposes or as provided under any other applicable regulation. To make such a request, please send an email to [email protected].
If the California Consumer Privacy Act is applicable to you, you have the right to:

1. know the categories of personal information collected about you, and obtain a copy of your personal information
2. know whether your personal information is sold or disclosed, and to whom;
3. opt out of the sale of your personal information;
4. access and then delete your personal information; and
5. equal service and price (non-discrimination) if you exercise your privacy rights.

“Personal Information” is defined to include information that identifies, relates to, describes, or is capable of being associated with a particular consumer or household. This includes (among other types of personal information) IP addresses, geolocation data, biometric information, and “unique identifiers” such as device and cookie IDs, Internet activity information like browsing history, commercial information such as products or services purchased or consuming histories or tendencies, and characteristics concerning an individual’s race, color, sex (including pregnancy, childbirth, and related medical conditions), age (40 or older), religion, genetic information, sexual orientation, political affiliation, national origin, disability or citizenship status. Inferences drawn from personal information “to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes” are also considered “personal information.”

Security
We try our best to provide you with leading security practices, like encrypting all requests via a secure connection (HTTPS), physical access controls, and password protection. However, no data transmission on the internet or on a network is 100% secure, so we cannot make a guarantee. Take care to manage access to the computers and devices where you are logged in to our application.

Data Retention
Elma retains data only for so long as needed for the uses we identify above. If you wish to end your account or no longer wish to receive emails from Elma, you can request deletion below. Otherwise, we retain account information for active accounts. Our backups of data are kept for one year.

Change of Control
If Elma is ever involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your information may be sold or transferred as part of that transaction. The promises in this policy will apply to your information as transferred to the new entity, including your right to delete your information.

Government Requests
Notwithstanding anything to the contrary in this policy, we may preserve or disclose your information if we believe that it is reasonably necessary to comply with a law, regulation, or legal request or to protect the safety, property, or rights of Elma or others. However, nothing in this policy is intended to limit any legal defenses or objections that you may have to a third party or government request to disclose your information. If you are a customer of the Services in the national defense industry and Elma receives a law enforcement request from a government other than where you are headquartered, Elma will give you notice unless we are prohibited from doing so and will assist you in objecting to that (at your expense).

Further information and contacts
You can send information, deletion and correction requests in connection with your data as well as any questions suggestions to: [email protected].