Privacy Policy

Art. 12 GDPR Transparent information

Thank you for visiting our website and your interest in our company. We regard data protection as a customer-oriented mark of quality. Protecting your personal data and safeguarding your personal rights are important to us. By way of this privacy policy, we would like to provide all visitors to our website with transparent information about the type, scope and purpose of the personal data collected, used and processed by us and explain the rights to which you are entitled. In principle, it is possible to use our website without providing your personal data. However, if you wish to make use of our company's services via our website, it may be necessary to process your personal data. The data that is automatically collected when you visit our website or the personal data entered by you when you use our services shall be processed in accordance with the current legal provisions for the protection of personal data. Should it be necessary to process your personal data and there is no legal basis for such processing, we generally obtain consent for the necessary purpose of processing. As the company responsible for processing, we have defined technical and organisational measures in order to ensure the highest possible level of protection of your personal data.
However, we would like to point out that data transmission via the World Wide Web can generally have security gaps.
If you wish to use our company's services and do not want to use the means of data transmission via the World Wide Web, it is also possible to contact us by phone.

1. Contact details of the controller responsible for processing

The responsible person in the sense of the General Data Protection Regulation is:

EXPERT Transformatorenbau GmbH
Industriestr. 6a
64653 Lorsch, Germany
Managing Directors:
Dirk Matzner
Steffen Otto

The following person has been designated as the data protection officer:

Mr Volker Ahlers
ASUMED®Arbeitsschutz GmbH & Co. KG
Von-Hausen-Straße 35
64653 Lorsch, Germany
Telephone: +49 6251 175290

2. Collection of general access data

The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us.
These are:

  • the browser type and browser version
  • the operating system used
  • the referrer URL
  • the host name of the accessing computer
  • the time of the server request
  • the IP address

This data is not combined with other data sources. We would like to further point out that this data cannot be attributed to a specific person. We use this technical access data exclusively for the following purposes:

  • to improve the attractiveness and usability of our websites,
  • to detect technical problems on our website at an early stage,
  • to deliver the content of our website correctly,
  • and to provide law enforcement agencies with the information required for criminal prosecution in the event of a cyber attack.

This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorised access.

3. Collection and forwarding of personal data

We use your personal data only for the data protection purposes stated on this information page. The following input masks exist on our website for the collection of personal data:

3.1. Submission of application documents

When you submit your application (either online or by mail), we collect and process various personal data items related to your application. In particular, this includes your contact information (name, address, telephone number and e-mail), application documents (cover letter, CV, references or other certificates and qualifications). As part of an online application via the application form, transmission shall only be effected via an encrypted site in line with the currently accepted state of the art in order to ensure that your personal data and application documents are protected against manipulation and unauthorised access. After sending, you will receive an e-mail confirming receipt of the documents. Personal data related to your application is collected and processed exclusively for the purposes of filling positions within our company. Your data will only ever be forwarded to internal departments and specialist units that are responsible for the specific application process. Your personal application data shall not be passed on to other companies without your prior express consent. Your application data shall not be used or shared with third parties beyond the scope described here.

Your personal application data shall generally be erased automatically three months after the application process has ended. This does not apply if erasure is contrary to legal provisions, if storage for a longer period is required for the purposes of providing evidence, or if you have expressly agreed to have your data stored for a longer period, e.g. for future job postings. If an employment contract is concluded with an applicant, the transmitted data shall be stored for the purposes of handling the employment relationship in accordance with the legal requirements.

3.2. Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you have provided on the form, shall be stored for the purposes of processing the enquiry or if there are follow-up questions. We shall not disclose this data to third parties without your consent. The data entered in the contact form shall therefore be processed solely on the basis of your consent (Art. 6 (1) (a) GDPR). You may withdraw this consent at any time. An informal e-mail message to us is sufficient for this purpose. The legality of the data processing carried out up to withdrawal remains unaffected by the withdrawal. The data entered by you in the contact form shall remain with us until you request that we delete it, withdraw your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected. Such personal data transmitted to us by you on a voluntary basis shall be stored for the purposes of handling your enquiry or contacting the data subject. This personal data is not passed on to third parties.

3.3. Processing data (customers / suppliers - and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (stock data). This is based on point (b) of Art. 6 (1) GDPR, which allows the processing of data for the performance of a contract or precontractual measures.
We collect, process and use personal data on our website (usage data) only to the extent that this is necessary in order to enable users to use the service and to charge them for the service.
Collection and storage of personal data and nature and purpose of use
When you enter into a contract with us, we collect the following information:

  • Salutation, first name, last name,
  • Valid e-mail address,
  • Address,
  • Telephone number (landline and/or mobile)
  • Additional information that is required for the preparation, execution and fulfilment of the contract you have entered into.

These data are collected

  • in order to identify you as a contractual partner;
  • in order to be able to fulfil the contract properly
  • in order to correspond with you;
  • for billing purposes;
  • for the settlement of any existing claims and the assertion of the contract entered into with you

The data processing is based on your request and is necessary in accordance with point (b) of Art. 6 (1) GDPR for the stated purposes for the proper processing of the contract.

The data collected by us are stored until the end of the statutory retention period (10 years after the end of the calendar year in which the customer relationship was terminated) and then erased, unless we are obliged to longer storage due to tax and commercial retention and documentation periods (from the German Commercial Code (HGB), German Penal Code (StGB) or German Fiscal Code (AO)) or you have consented to longer storage.

3.4. Disclosure to third parties

Your personal data will not be disclosed to third parties for purposes other than those mentioned below.
Your personal data will be disclosed to third parties to the extent that this is required according to point (b) of Art. 6 (1) sentence 1 GDPR for the execution of the contract. This includes in particular the disclosure to service providers such as transport and logistics companies. The data provided may only be used by the service providers for the stated purposes.

4. Plugins and Tools

4.1. YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our online offering appealing. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Further information about how user data is handled can be found in YouTube’s privacy policy at:

4.2. Google Web Fonts

This page uses web fonts provided by Google to ensure the uniform representation of fonts. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose, your browser has to establish a direct connection to the Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google web fonts is done in the interest of a uniform and attractive presentation of our online offering. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font is used by your computer.
Further information about Google Web Fonts can be found at and in Google’s privacy policy at

4.3. Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the Google Maps functions, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is done in the interest of making our online offering appealing and to facilitate the location of places specified by us on the website. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Further information about how user data is handled can be found in Google's privacy policy at:

5. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

6. Objection to advertising e-mails

We hereby expressly prohibit the use of contact data published in the context of our legal notice requirements with regard to sending advertising and information materials that have not been expressly requested. The operators of the websites reserve the express right to take legal action in the event of unsolicited advertising information being sent, such as via spam e-mails.

7. Deletion, blocking and duration of the storage of personal data

We process and store your personal data only for the period of time required to achieve the respective purpose of storage or as required by the various retention periods provided for by law.
After discontinuation of a storage purpose or after expiry of the retention period provided by law, the personal data is routinely blocked or deleted for further processing in accordance with the statutory regulations.

8. Data protection rights of the data subject

If you have any questions concerning your personal data, you may contact us in writing at any time. You have the following rights under the GDPR:

8.1. Right of access (sub-section Art. 15 GDPR)

You are entitled, at any time, to obtain information about what categories and information with regard to your personal data are processed by us for what purpose and how long and according to what criteria this data is stored and whether automated decision making, including profiling, is used in this context. Moreover, you are entitled to find out what recipients or categories of recipient to whom your data has been or will be disclosed, in particular with respect to recipients in third countries or international organisations. In this case, you are also entitled to be informed of the appropriate safeguards related to the transmission of your personal data.
In addition to the right to lodge a complaint with a supervisory authority and the right to information about the origin of your data, you have the right to erase and rectify your data as well as the right to restrict or object to the processing of your personal data. In all the aforementioned cases, you have the right to request a free copy of your personal data that is processed by us from the data processor. For all further copies which you request or which go beyond the data subject's right of access, we are entitled to charge a reasonable administration fee.

8.2. Right to rectification (Art. 16 GDPR)

You have the right to request the rectification of your inaccurate personal data without undue delay and - taking into account the purposes of the processing - the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you wish to exercise the right to rectification, you can contact our data protection officer or the data controller at any time.

8.3. Right to erasure (Art. 17 GDPR)

You have the right to request the immediate erasure of your data ("right to be forgotten"), in particular if storage of the data is no longer necessary, if you have withdrawn your consent to data processing, if your data has been unlawfully processed or collected or if there is a legal obligation to erase the data under EU or national law.
However, the right to be forgotten does not apply if there is a prevailing right to freedom of expression or information, if storage of the data is required for compliance with a legal obligation (e.g. retention obligations), if archiving purposes prevent erasure or if storage is necessary for the establishment, exercise or defence of legal claims.

8.4. Right to restriction (Art. 18 GDPR)

You have the right to request that the controller restrict the processing of your data if you are contesting the accuracy of the data, if the processing is unlawful, if you oppose the erasure of your personal data and are requesting instead that processing of your data be restricted, if the personal data is no longer needed for the purposes of processing or if you have objected to the processing of your data pursuant to Article 21(1), as long as it is not yet clear whether there are any legitimate reasons on our part which outweigh yours.

8.5. Right to data portability (Art. 20 GDPR)

You have the right to the portability of your personal data which you have provided to our company in the form of a commonly used format, so that you can have this data transferred to another controller without hindrance as long as you have consented and the processing is carried out by automated means.

8.6. Right to object (Art. 21 GDPR)

You have the right to object to the collection, processing or use of your personal data for the purposes of direct marketing or market and opinion research as well as general commercial data processing, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. Moreover, you may not exercise your right to object if a legal provision provides for the collection, processing or use of the data or imposes an obligation to collect, process or use the data.

8.7. Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG [Bundesdatenschutzgesetz - Federal Data Protection Act])

You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority for the Bundesland [Federal State] of your habitual residence or with the competent authority responsible for us.
The address of the competent supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
[The Hessian Commissioner for Data Protection and Freedom of Information]
PO Box 3163
65021 Wiesbaden, Germany
Telephone: +49 611 1408 - 0
Fax: +49 611 1408 - 611

8.8. Right to withdraw consent under data protection law (Art. 7 (3) GDPR)

You may withdraw your consent to the processing of your personal data at any time and without giving reasons. This also applies to the withdrawal of declarations of consent that have been granted to us before the entry into force of the EU General Data Protection Regulation.

9. Legal basis of processing

In the processing of personal data for which we obtain consent from the data subject, Art. 6 (1) sentence 1 a) of the General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data which is required to fulfil a contract to which the data subject is a party, Art. 6 (1) sentence 1 b) General Data Protection Regulation (GDPR) serves as the legal basis. This regulation also covers processing procedures which are necessary for carrying out the steps prior to entering into a contract.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) sentence 1 c) (GDPR) serves as the legal basis.
If processing is necessary in order to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) sentence 1 f) serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimisation and maintenance of the security of our online offering.

10. Transmission of data to third parties

We generally do not sell or lend any user data. Transmission to a third party beyond the scope of this privacy policy only takes place if this is necessary for the processing of the respective requested service.
We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. law enforcement agencies) request information in writing or there is a court order.
No transmission of personal data to what are referred to as third countries outside the EU/EEA area shall take place.

11. Statutory or contractual provisions for the provision of personal data and possible consequences of non-provision

We hereby point out that the provision of personal data is required by law in certain cases (e.g. tax regulations) or may result from contractual regulations (e.g. information relating to or provided by the contracting party). For example, for the purposes of concluding a contract it may be necessary for the data subject/contracting party to provide their personal data so that we can process their request (e.g. an order). An obligation to provide personal data primarily arises when entering into a contract. If no personal data is provided in this case, the contract cannot be concluded with the data subject. Before the data subject provides personal data, the data subject may consult our data protection officer or the controller responsible for processing. The data protection officer or the controller responsible for processing shall then explain to the data subject whether the provision of the required personal data is legally or contractually stipulated or is required to conclude the contract, and whether the data subject is required to provide the personal data based on their request or what consequences the non-provision of the desired data has for the data subject.

12. The existence of automated decision making

As a company which is aware of its responsibility, we shall refrain from automatic decision making or profiling in the context of our business relationships.