PHOENIX CONTACT on data protection

1. Introduction and scope

We are delighted that you are interested in our company, products, and services and would like to provide you with some key information regarding our data processing activities.

Protecting personal data is crucial, particularly for the future of Internet-based business models and the development of Internet-based economies. With this notice on data protection, we want to emphasize our commitment to protecting your privacy.

Our staff and our service providers are bound to confidentiality and to comply with the provisions of applicable data protection laws.

We take the protection of your personal data seriously and strictly adhere to the rules of applicable data protection laws.

Definition: “Personal data” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household , for instance, name, geographical address, contact data, user ID, IP address, photo and video recordings, location data, etc.

The following notice informs you about the data processing activities in relation to your personal data.

2. Data controller / Data protection officer

Information on the entity responsible for the processing of your personal data ("Controller"), including how to contact the appointed data protection officer ("DPO"), where applicable, can be found here (the Controller hereinafter referred to "we", "us" or "our").

3. Categories of data / Purposes

We may collect and share (see Section 4 below) the following categories of your personal data for purposes as described below:

• Identifiers,
• Commercial information,
• Geological data,
• Internet or other electronic network activity information,
• Audio, electronic, visual or similar information,
• Professional information,
• Education information, and
• Inferences drawn from any of the above information categories.

3.1. Data processing on our websites

For security and technical reasons, we automatically process information transmitted by your device's browser to our system protocols. This includes, but is not limited to:

• Browser type/version,
• Operating system used,
• Requested URLs (website) on our systems,
• Referrer URL (the website that referred to our website),
• Host name and full IP address or unique ID of the device accessing the site,
• Date and time of call,
• Data volumes and file types called.

These data will not be aggregated with data from other sources, nor do we carry out personalized statistical analysis based on these data.

We process IP addresses in full length (i.e. without IP masking) only to the technically required extent.

The purpose of the processing of these data is to provide you with our websites and the services and functionalities available thereon.

The system log data processed in this context to offer you the requested service (e.g. IP address) is deleted after a maximum period of six months.

3.2. Registration for our web portals

Our websites offer services and functionalities to manage our business relationship with you, for example, permanent saving of wish lists, projects or product comparisons, the ordering of goods or services or the requesting and viewing of quotes, which are only available to registered users.

The data required to complete a registration in our web portal are your name, a valid email address and your country of residence. You also have the option of providing additional personal data about you (title, company, if relevant: your Phoenix Contact customer number, postal address, phone number). Some of these data are required in order to use certain services on our web portal, such as placing online orders, tracking your orders, generating individual price lists or processing order returns.

When purchasing products or services, your data may be passed on by us to payment service providers, insofar as this is necessary for the processing of the purchase transaction and the payments. In some cases, the payment service providers also collect data themselves, provided that you create or have created an account with them. In this case, you must log in with the payment service provider with your access data in the course of the order and the privacy policy of the respective payment service provider applies.

The processing of the above listed data serves the purpose of providing you with the services and functionalities of our websites available to registered users, such as the possibility of placing online orders.

We use the additional data provided to contact you personally following registration in the web portal as well as for advertising purposes. This includes updating our customer master database or providing you with information on our products and services to the extent permitted by law.

You can withdraw your consent to the processing of your personal data for marketing purposes at any time by sending an email to our designated point of contact. You can also delete your account at any time by contacting our designated point of contact. We will erase your personal data, provided that no statutory retention periods apply (see Section 6 below).

3.3. Newsletter

You have the option of subscribing to our newsletter. Subscription to our newsletter requires providing a valid email address. Beyond that, you can choose to provide us with additional personal data about you (title, name, company, postal address).

The purpose of the processing of your personal data is to provide you with the requested newsletter. The additional data provided in the newsletter registration process is used to personally address the newsletter.

You can withdraw your consent for the newsletter subscription at any time with effect for the future by using the unsubscribe button of our newsletters. Alternatively, you can send an email to our designated point of contact stating that you wish to unsubscribe.

Our websites also offer you the option of creating a user profile when subscribing for the newsletter. To this end, we analyze your interactions with the newsletter (clickstream record, date and time, frequency and topics clicked on, the specific emails opened and when) so that we can subsequently send you information better tailored to your interests. You can withdraw your consent for the creation of a user profile at any time with effect for the future by sending an email to our designated point of contact.

We will keep your personal data for the duration of your newsletter subscription. Once you unsubscribe, we will keep your personal data until the applicable statute of limitations expires. For general information on retention periods see Section 6 below.

3.4. Contacting us

When you submit a contact request or a query to us (e.g. by calling or faxing our office, sending an email to us or using any of the contact forms on our websites), we process the personal data you have provided us with (such as name, address, contact information, message, etc.).

The purpose of this processing activity is to deal with your specific request and/or query.

Personal data processed in connection with contact queries is deleted after a period of 12 months, provided that no statutory retention periods apply (see Section 6 below).

3.5. Use of collaboration tools

When you work with us using collaboration tools (e.g., IT systems for email, messaging, appointment setting, web conferencing, data exchange), we process the personal data you provide.

If you access the website of a service provider, the respective service provider is responsible for data processing and its privacy statement applies.

3.6. Seminars or events

We process personal data about you when you register for a seminar or an event.

The categories of data processed in this context include your name, address, contact information, as well as event-related information such as location, date, travel options, hotels, etc. For travel arrangements we also process the following categories of data, where applicable: dietary preferences, passport details (e.g. for visa applications), etc. If you are an employee of ours we will process your staff number, organizational key, cost center.

The purpose of the processing is the overall management of the relevant seminar or event (including the planning, preparation and follow-up thereof).

The personal data processed in connection with events is deleted after a maximum period of 12 months, provided that no statutory retention periods apply (see Section 6 below).

3.6. Use of PROFICLOUD and of PLCnext Store

We process personal data about you when you register for our PROFICLOUD or the PLCnext Store.

In order to register for our PROFICLOUD, you are required to choose a username, and a password and to provide a valid email address.

The processing of your personal data serves the purpose of using our PROFICLOUD and all its services and features.

One such feature is our PLCnext community, which you can also use after registration, including functionalities such as the possibility to participate in our forum by creating and commenting on posts.

You can delete your user account at any time by clicking on the "Remove” button. When you remove your user account your email address is deleted and only the username is kept to ensure traceability in the customer account. Additionally, your posts in the community will be kept so as not to lose the context of a discussion.

The system log data processed in this context to offer you the requested service (e.g. IP address) is deleted after a maximum period of six months, provided that no statutory retention periods apply (see Section 6 below).

3.8. Use of our knowledge base (Empolis)

Data resulting from the analysis of the knowledge base use is anonymized. As an example, we analyze the search queries including the search terms and search filters, calls and runs of decision trees including the answers given and solutions chosen, the download and display of documents, etc. It is not possible to assign these data to the respective user or identify the user. Further, any comments you choose to make on our documents cannot be assigned to you.

The purpose of this processing is to obtain information on the use of our knowledge base in order to be able to improve it in accordance with the users' needs.

The system log data processed in this context to offer you the requested service (e.g. IP address) is deleted after a maximum period of six months, provided that no statutory retention periods apply (see Section 6 below).

3.9. Participation in surveys

We process the personal data you provide to us when you participate in a survey.

The data processed in this context consists of your name, email address, geographical address, country of residence, your survey answers and log data generated in the course of the survey (IP address, date and time of execution, etc.).

The purpose of the processing is to carry out surveys and analyze the survey results in order to further improve our services.

Personal data processed in connection with surveys is deleted after a period of 12 months, provided that no statutory retention periods apply (see Section 6 below).

3.10. Customer relationship management (CRM)

Customer relationship management requires processing personal data related to our customer, provided that he or she is a natural person, and/or the designated contact person, where applicable.

The categories of data include name, title, business address, business contact information (email address, phone number), department, company position, contact history, marketing history (events attendances, communication profile), etc.

The purposes of the processing include communicating with our customers, carrying out advertising activities such as sending out invitations to events, informing about new products and services, etc.

Personal data in connection with customer relationship management is deleted after the business relationship ends, provided that no statutory retention periods apply (see Section 6 below).

3.11. Request for quotation/order processing

We process your personal data in connection with a request for quotation, order processing, sample order, license processing, configuration, etc.

The categories of data include name, address (delivery address, billing address), contact information (email address, phone number), bank details, results from the sanctions screenings, etc.

The purpose of the processing is the performance of business transactions with our customer. The personal data processed relates to the customer, provided that he or she is a natural person, and/or the designated contact person, where applicable.

Personal data in connection with quotation requests and order processing is deleted after the business relationship ends, provided that no statutory retention periods apply (see Section 6 below).

3.12. Supplier management/Purchase order processing

We process your personal data when you register in the supplier portal as well as in connection with the processing of purchase orders.

The categories of data concerned include name, title, business address, business contact information, title, department, company position, bank details, control data, VAT ID number, credit rating, risk report, supplier profile, etc.

The purpose of the processing is the performance of business transactions with our suppliers. The personal data processed relates to the supplier, provided that he or she is a natural person, and/or the designated contact person, where applicable.

Personal data in connection with supplier management and purchase order processing is deleted after the business relationship ends, provided that no statutory retention periods apply (see Section 6 below).

3.13. Job applicant’s data

We process the personal data you provide to us as part of a job application and/or registration in the Application Portal.

The categories of data include your name, title, address, contact details, date of birth, citizenship, CV, certifications and qualifications and any other information you include in your job application.

We process your personal data to communicate with you and only as part and for the purpose of our recruitment process.

Your application will be automatically deleted six months after the end of the application process, provided that no statutory retention periods apply (see Section 6 below).

3.14. Use of our blogs

Our blogs have comment functions for blog entries that you can only use, if you provide a username of your choice as well as a valid email address.

The personal data you provide to us in connection with the comment function is processed exclusively for the purpose of publication on the blog. You can withdraw your consent to the use of your personal data at any time by sending an email to our designated point of contact. However, after removing your personal data your comments will be kept so as not to lose the context of a discussion.

For general information on retention periods please see Section 6 below.

3.15. Cookies

Our websites use cookies. Cookies are small text files that are stored by your browser on your device. We use cookies to make our websites more user-friendly, effective, and secure. By way of an example, cookies enable the technical implementation of a user session in our online catalog. Further, cookies provide information which enables us to optimize our websites to meet user requirements.

Some of the cookies we use are session cookies. These are automatically deleted when closing your browser. Some cookies are saved for a longer period of time.

All cookies on our websites contain purely technical information in a pseudonymized or anonymized format, with no personal data (such as the name of the person).

If you want to prevent cookies from being saved, go to Cookie Management or click on "Manage Cookies" on the cookie banner that pops up on your screen when you first open our website. In addition, you may sometimes be able to manage your cookie preferences in your browser settings, for example, by selecting “Do not accept cookies”. Please note that the scope of functions of our websites may be severely limited, if the use of cookies is restricted. A number of functions may no longer be available. This may also be the case when visiting our websites using the so-called “Private Mode” of your browser.

We ourselves do not store any information in the LSO (Local Shared Objects) area of your computer, so we do not use so-called “Flash Cookies”. However, other services we may link to, such as YouTube, use this function for their own purposes, where applicable.

3.16. Social Media / Social Networks / External Links

We do not use any automatically activated plug-ins (e.g. iFrames) of social networks on our websites. Our social network buttons such as Facebook, Twitter, Xing, LinkedIn, YouTube, Instagram etc. are mere links to the respective sites of the provider or activate the wanted cloud service. Once you click on these links, you will be redirected to the pages of the respective social network or the specific cloud service is being activated. Please note that once on the social network websites or cloud services, their respective data protection notices are applicable.

In addition, we have an online presence in some of these social networks and platforms to promote our business, inform interested parties/users about our products and services and to communicate with them. Your personal data is often used for the platform's own purposes, e.g. for market research and advertising purposes or to analyze user behavior for the creation of user profiles. To this end, cookies from these platforms are usually stored on the user's device.

Although we do not have access to the profile data processed by the platforms, we may be jointly responsible for the data processing under applicable data protection laws. For further information, please contact our designated point of contact.

For detailed information on the processing of your personal data and possible opt-out options, please refer to the following:

Facebook

Privacy policy at: https://www.facebook.com/about/privacy,
Opt-out at: https://www.facebook.com/settings?tab=ads.

Instagram

Privacy policy at: http://instagram.com/about/legal/privacy/
Opt-out at: http://instagram.com/about/legal/privacy/ (point VI.).

YouTube / Google (Maps) / reCAPTCHA

Privacy policy at: https://policies.google.com/privacy?hl=en&gl=en,
Opt-out at: https://adssettings.google.com/.

Twitter

Privacy policy at: www.twitter.com/privacy ,
Opt-out at: https://twitter.com/personalization.

LinkedIn

Privacy policy at: https://www.linkedin.com/legal/privacy-policy,
Opt-out at: https://www.linkedin.com/psettings/advertising.

XING

Privacy policy at: www.xing.com/privacy
Opt-out at: https://privacy.xing.com/en/privacy-policy.

walls.io

Privacy policy at: https://walls.io/privacy
Opt-out at: https://walls.io/privacy.

Facebook Cloud

For the purposes of managing our online presence in social media (Facebook, Instagram, LinkedIn and Twitter), we use Facelift Cloud, a service of Facelift Brand Building Technologies GmbH (Gerhofstrasse 19, 20354 Hamburg, Germany). Facelift Cloud allows us to publish, advertise, manage, monitor and moderate the content of our social media profiles. To this end the social media user IDs of customers and interested parties interacting with us on the platforms as well as the communication history are stored in a data center of Facelift Brand Building Technologies GmbH and made available to us for use via the Facelift Cloud software.

3.17. Web analyses

WiredMinds
Our website uses the tracking pixel technology of WiredMinds GmbH to analyze visitors’ behavior. Cookies and pixel tags are used for this purpose (“tracking pixel technology”). Pixel tags are small, invisible characters that are contained within a website. Collecting and analyzing the data enables us to trace the behavior of visitors on our websites. In particular, we are able to obtain information on the preferred areas of interest of our users as shown by the use of the respective websites and the geographical location of visitors.

The data collected is processed for our own purposes and is not shared with any third parties outside the Phoenix Contact Group. Further, these data is under no circumstances used for other purposes or sold. The data collected will not be used to identify the website visitor or merged with other personal data about the visitor unless agreed to separately by the person concerned. Where IP addresses are processed, these are immediately anonymized by means of deleting the last set of numbers following collection.

If you do not wish to have your behavioral data processed as described above, please click here. Please note that the objection to the processing is carried out by storing a cookie on your device which prevents the collection of your data. If you delete your browser cookies or use a different browser on your next visit, you will need to click the link again.

Matomo
On some of our websites user interactions are analyzed by the tracking software Matomo (matomo.org). The IP address is stored anonymously, i.e. at least the last three digits of the IP address are set to 0. Thus, the collected data cannot be traced back to a specific person.

The tracking software is only used to adapt the website to the current technical conditions and to optimize the Internet offer for our users. The data collected this way are made available only to us, after having been processed, and are not shared with any third parties. Further, these data is not used for other purposes nor sold. The tracking software runs on own servers of the Phoenix Contact Group in Germany, unless otherwise required under applicable law. Statistical data and any personal data (e.g. via registration and contact forms) are processed separately. No link is made between personal data and statistical data at any time.

If you do not wish to have data processed as described above, please remove the tick from the checkbox in the menu of the respective website to object to the processing of your data. Please note that this is done by storing a cookie on your device which prevents the collection of your data. If you delete your browser cookies or use another browser for your next visit, you will need to click the link again.

Google Analytics
We use Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") for web analysis and range measurement. Google uses cookies. The information generated by the cookie about users' visits to our website is generally transmitted to and stored by Google on servers in the United States.

However, Google Analytics is used by us exclusively with activated IP anonymization (so-called IP masking). This means that the IP address of users is shortened by Google. Only in exceptional cases, e.g. if technical failures occur in Europe, the full IP address is transferred to a Google server in the USA and then shortened there. To the best of our knowledge, the IP address transmitted by the user's browser will not be merged with other data of the user held by Google.

Google uses the transmitted data on our behalf and on the basis of a data processing agreement, to evaluate the use of our website, to create reports on the activities within our online offering and to provide us with other services associated with the use of the website. With the help of these analysis results we can, for example, identify particularly popular areas of our website and the preferences of users and use the knowledge gained in this way to further improve our offer and make it more targeted and interesting for you as a user.

The determining reason for the use of Google Analytics is the fact that there is no equally suitable web analysis tool for our specific purposes. Google Analytics is not only the most widespread tool in the international context and is therefore particularly suitable for websites of internationally active groups of companies. Due to its wide distribution, Google Analytics - unlike other web analysis tools - also has standard interfaces to other software systems that we use. Furthermore, in your interest we implemented Google Analytics as data protection friendly as possible (in addition to IP masking, e.g. by not processing the user ID for cross-device analysis of visitor flows, by reducing the standard storage period, etc.).

The acceptance of cookies when using our website is not mandatory; if you do not wish cookies to be stored on your device, you can deactivate the corresponding option in the system settings of your browser or in the Cookiebot settings ((Cookie Management). Additionally, you can delete saved cookies at any time in the system settings of your browser. If you do not accept cookies, however, this may lead to functional limitations. In addition, you can deactivate the use of Google Analytics cookies using a browser add-on if you do not wish the website analysis. You can download this add-on here: http://tools.google.com/dlpage/gaoptout?hl=en.

You can use the Google Analytics opt-out browser add-on to prevent Google Analytics from using your information. To disable Google Analytics, download and install your web browser add-on. The Google Analytics opt-out add-on is compatible with all common browsers. For the add-on to work, it must be loaded and run correctly in your browser. To learn more about how to disable Google Analytics and correctly install the browser add-on, click here: https://support.google.com/analytics/answer/181881?hl=en.

As an alternative to the browser add-on, for example for mobile devices, you can also prevent Google Analytics from capturing data by clicking on the opt-out link that you find in the privacy menu of the respective website if this website uses Google Analytics. An "opt-out cookie" will then be set to prevent your data from being collected in the future. The opt-out cookie applies only to the specific browser used when you set it and only to our website and is stored on your device. If you delete the cookies in your browser, you must set the opt-out cookie again.

The common browsers also offer a "Do-Not-Track-Function". If this function is activated, your device informs the web analysis tool that you do not want to be tracked.

The data processed by Google Analytics is automatically deleted after a period of 13 months. Data whose retention period has been reached is automatically deleted once a month.

You can find out more about Google's use of data, setting and withdrawal options in Google's privacy policy: https://policies.google.com/privacy

Google Analytics 4
Our website uses Google Analytics 4, a newly developed product of Google which is currently in its beta testing phase. The Google Analytics 4 allows us to combine app and web data (such as clicks, page views, apps open, scrolls, outbound clicks, site search, video engagement, file downloads, and more) for unified reporting and analysis across platforms.

For more information on Google Analytics, including on the applicable retention periods, please see above under "Google Analytics".

Google Optimize
Our website uses the web analysis and optimization tool Google Optimize, a Google Analytics sub-service, also a service of Google (see above). We use Google Optimize to improve the content and features of our website by way of A/B testing. This means that specific new functions or versions of our website are made available to users, and statistical analysis is used to determine which variation of the function or the website performs better.

A/B testing is performed using cookies. Please note that the information collected by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use Google Optimize with the extension “_anonymizeIp()”.

For more information on Google Analytics, including on the applicable retention periods, please see above under "Google Analytics".

3.18. Online Advertising (Retargeting / Remarketing)

For the purpose of optimizing our online offer we use third-party retargeting and remarketing services on our website to help us analyze, improve and operate our online services in an economic way.

How Retargeting / Remarketing works
On our website, data are collected using cookie / tracking technology to improve our online offer. These data are not used to identify you personally, but solely to analyze the use of our website and to address users who are already interested in our content and offers with interest-related advertising. We are convinced that the display of an interest-related advertisement is generally more interesting for the user than advertising that has no such personal reference. The following section of this data protection notice informs you about the third parties we cooperate with, how your data are processed in this context, and how you can deactivate and opt-out from such retargeting / remarketing technologies.

Google Ads
We use the online marketing tool Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use the remarketing function within the Google Ad Service in order to place ads within the Google Advertising Network (e.g. in search results, videos, web pages, etc.) so that they are specifically displayed to users who have a supposed interest in the ads or the products and services advertised. For these purposes, so-called (re)marketing tags are integrated and executed on our website and other websites of the Google Advertising Network directly by Google. In this way an individual cookie is stored on the user's device (comparable technologies can also be used instead of cookies), this serves to recognize your browser. Google usually stores information about this cookie, such as which websites the user has visited, what content he is interested in and what offers the user has clicked on, as well as technical information on the browser and operating system, referring websites, visiting times and other information about the use of the online service.

Furthermore, we use the function of Ads Conversion. Using an individual "conversion cookie" we can track how many of our visitors are taking actions on our website resulting from an advertising campaign. The information collected with the help of the cookie is used by Google to compile conversion statistics for us. However, we only know the anonymous total number of users who clicked on our ad and were directed to a page with a conversion tracking tag. We do not receive any personal data.

The data processing associated with the services described above is carried out for analysis, optimization and marketing purposes, in particular in order to better measure and evaluate the success of our advertising campaigns and to provide you with offers and content that are as closely aligned with your interests as possible. If you do not wish such marketing cookies to be stored on your device, you can deactivate the corresponding option in the system settings of your browser. Already stored cookies can be removed at any time in the system settings of your browser. However, if you do not accept any cookies, this may lead to functional limitations. You can also prevent data processing by Google Ads by clicking on the link provided in the privacy menu of the webpage if that webpage uses Google Ads. An "opt-out cookie" will then be set to prevent your data from being collected in the future. The opt-out cookie applies only to the browser used when you set it and only to our website and is stored on your terminal device. If you delete the cookies in your browser, you must set the opt-out cookie again.

The common browsers also offer a "Do-Not-Track-Function". If this function is activated, your device informs the web analysis tool that you do not want to be tracked.

The pseudonymized data processed by Google Ads is deleted after 90 days. Further information on the use of data by Google, setting and withdrawal options can be found in Google's privacy policy (https://policies.google.com/technologies/ads?hl=en) and in your personal settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Google Tag Manager
We would also like to inform you about the use of the Google Tag Manager on our website. Google Tag Manager is a solution that allows website providers to manage website tags through a single interface and in this way integrate in particular Google services into their offer. The Google Tag Manager itself (which implements the tags) does not collect or process any personal data.

Facebook Pixel
We use the analytics tool Facebook Pixel in the standard configuration on our website, a product from Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland), to measure the effectiveness of our advertising by understanding the behavior of users and improve the sales of our products by tailoring our marketing strategies to make our ads more relevant to our audience.

Pixel is a few lines of code from Facebook copied in our website which enable Facebook to receive information about users (such as referral URLs, the devices used and demographic information) and track the actions they take on our website either as a result of Facebook ads or organic reach (such as page views and purchases).

Please note that, if you are logged into Facebook when visiting our website, Facebook can assign the visit to your account. However, even if you are not a registered Facebook user or are not logged in, Facebook may still collect identifying features about you to create profiles and transfer the information to its subsidiaries and affiliates.

The data processed by the Facebook Pixel is deleted after a period of 180 days after your last visit.

We will seek your consent (Art. 6 (1) (a) GDPR) prior to activating the Facebook Pixel.

LinkedIn Insight Tag
We use the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Gardner House, Wilton Plaza, Dublin 2, Ireland. The Insight tag is a piece of code for our website that allows us to optimize campaigns, retarget website visitors, and learn more about your target audience. The LinkedIn Insight Tag creates a unique LinkedIn browser cookie on your browser and enables the collection of the following data for that cookie: metadata such as IP address, timestamp, and page events (like page views).

The data processed by the LinkedIn Insight Tag is deleted after a period of 90 days after your last visit.

We will seek your consent (Art. 6 (1) (a) GDPR) prior to activating the LinkedIn Insight Tag.

Microsoft Ads
We use Microsoft Ads, a service of Microsoft Ireland Operations Limited ,The Atrium Building Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18)("Microsoft"). Microsoft Ads is an advertising platform that allows us to build campaigns and target users across Microsoft’s Search and Audience Network. To this end, Microsoft Ads stores a cookie on your computer if you came to our website through a Microsoft ad. Microsoft and we can thus recognize that someone has clicked on an ad, been redirected to our website, and reached a predetermined destination page (conversion page). We only know the total number of users who clicked on an ad and were redirected to the conversion page, i.e., we only process aggregated data.

More Information about Microsoft’s data storage and retention policy can be found
https://privacy.microsoft.com/de-de/privacystatement.

We will seek your consent (Art. 6 (1) (a) GDPR) prior to using Microsoft Ads.

3.19. Further purposes of Personal data processing

In compliance with applicable law, we reserve the right to process your personal data and any other data we hold about you for the purposes of investigating, preventing, or taking action in the event of illegal activities and/or suspected fraud as well as the breach of Phoenix Contact´s Terms of Use for Works.

4. Recipients of data / Data transfers

We share your personal data insofar as necessary for the purposes of the processing as described above. The personal data is limited to what is strictly necessary to achieve the intended purpose of the processing. The recipients of data include:

• Other group companies: you can find a list of the group companies linked below;
• Service providers: we work with service providers for a variety of tasks such as the newsletter emailing, event management, customer service, etc. Our service providers are contractually bound to confidentiality and to comply with applicable data protection laws. We do not sell, rent, release, disclose, disseminate, transfer, or otherwise make available or communicate your personal data, including the personal information of minors under the age of 16, orally, in writing, or by electronic or other means, to third parties for marketing purposes;
• Authorities or governmental bodies which require us to disclose data about you;
• Lawyers and advisors: where necessary, we share your personal data with these recipients in order to investigate, prevent, or take action regarding illegal activities, suspected fraud and violations of the Phoenix Contact´s Terms of Use for Works, as well as for the establishment, exercise or defense of a legal claim.

5. Secure Internet communication

We make every effort to ensure that your personal data is transferred and stored using technical and organizational measures to prevent access by unauthorized third parties.

As a general rule, the Internet is regarded as an insecure environment. In contrast to a telephone line, for instance, data transfers on the Internet can be more easily wiretapped, recorded or even modified by unauthorized third parties. To ensure the confidentiality of communications with you, we use an AES 256bit SSL/TLS encryption of our website. This encryption is regarded as secure, based on the latest technological advancements. Operating systems and browsers from earlier versions also achieve this security level. If necessary, you should update the operating system and the browser on your device to benefit from this high-level encryption.

Email communication without encryption does not guarantee comprehensive data security. Therefore, we recommend using the regular postal mail for confidential information.

6. Retention period

The applicable retention period varies depending on the category of data and/or the purpose of the processing. Please refer to Section 3 above for more detailed information on the applicable retention periods depending on the purpose.

As a general rule, we keep your personal data only as long as necessary for the purpose of the processing. We are, however, subject to statutory retention requirements. This means that we are required by law to store certain data for a certain period of time. This is usually the case for commercial- and tax-relevant data (such as bills and other transaction documents). Data stored because of applicable retention periods is not processed for further purposes. To learn more about applicable retention periods please contact our designated point of contact.

7. Data subjects rights

Should you have any questions that have not been addressed in this data protection notice, in case you wish more detailed information regarding a specific point, or should you have any complaints or requests about the processing of your personal data by us (e.g. a request for completion of incomplete personal data or for rectification of inaccurate personal data) please do not hesitate to contact our designated point of contact.

Additionally, you have the right to lodge a complaint with the competent data protection supervisory authority of your country of location, if you believe the processing of your personal data is unlawful.

Please note that depending on the circumstances, we may require proof of identification (e.g. information included in the ID card) to handle any requests regarding your personal data. An authorized agent may submit a request on your behalf by providing a copy of your power-of-attorney document granting that right, or providing another form of authorization, in which case we may still require that you verify your identity with us.

If you reside in the State of California (US), you have certain rights pursuant to the California Consumer Privacy Act. These include the rights to:

• Right to access personal information. You may be entitled to receive the specific pieces of your personal information we hold.
• Right to data portability. You may be entitled to receive a copy of your electronic personal information in a readily usable format.
• Right to disclosure. You may be entitled to receive information regarding the categories of personal information we collected, the sources from which we collected personal information, the purposes for which we collected and shared personal information, the categories of personal information that we sold and the categories of third parties to whom the personal information was sold, and the categories of personal information that we disclosed for a business purpose in the 12 months preceding your request.
• Right to deletion. You may be entitled to request that we delete the personal information that we have collected from you. We will use commercially reasonable efforts to honor your request, in compliance with applicable laws. Please note, however, that we may need or be required to keep such information, such as for our legitimate business purposes or to comply with applicable law.

You may freely exercise these rights without fear of being denied goods or services. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your personal information. If you are a California resident and would like to exercise one of your rights, please contact us at www.phoenixcontact.com/en-us or at (800) 888-7388.

8. Miscellaneous

In the event that we launch new services, alter our Internet procedures or if the legal requirements change or the Internet and IT security technology is further developed, this notice will be updated accordingly. In case of amendments, proper notice will be given on this website. The date of the last update of this notice can be found at the bottom of the page.

Our websites, their services and functionalities (such as the newsletter) may contain links or references to third-party websites. Please be aware that this notice does not apply to these other websites. We encourage you to read the terms of use as well as the data protection notices of any third-party websites you enter.

This notice is effective as of the date it was last updated.

Updated: November 2021