1. Controller

• Sigma Laser Applications & Systems GmbH
• Pfaffenbrunnen Str. 158, 63456 Hanau-Steinheim, Germany
• Phone: +49 (0)6181 413 6679
• Email: info@sigma-laser.com
• For questions about data protection, please contact our data protection officer at: info@sigma-laser.com

2. Hosting

The website and the portal are hosted on servers of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in data centres within the European Union. When you visit, technically necessary data (IP address, time, page requested, browser type) is processed in server logs to deliver the page and keep it secure (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days.

3. Registration and member account

At registration we collect first name, last name, company, job title, email address and a password; a phone number is optional. The email address is confirmed with a six-digit code. This data is used to set up and run your member account (Art. 6 (1) (b) GDPR).

For verification you upload one photo (you beside a laser welding machine, or the machine you run). A member of staff checks it. The photo serves this check only: it is not published, not shown to other members and not used for commercial purposes. It is deleted 30 days after the check is complete, or earlier at any time on your request.

4. The “Wertschätzung” campaign and the thank-you wheel

If you take part in the campaign we store the outcome of your spin, the certificate issued to you and — for a physical gift — the shipping address you give us, in order to send the gift (Art. 6 (1) (b) GDPR). The shipping address is passed to the shipping provider as far as necessary for delivery.

5. Campaign attribution when you click “Register”

When you click a register button on one of our pages, we record which page and — if present in the address — which campaign (UTM parameters) you came from. This is linked to your account when you complete registration and serves only to see which page led to the registration (Art. 6 (1) (f) GDPR). No third-party trackers are used. When you click one of the share buttons (LinkedIn, WhatsApp, copy link), we count the click per channel — with your member id if you are signed in, without the shared text (Art. 6 (1) (f) GDPR).

6. Emails

We send the emails your account needs: the confirmation code, the activation notice, information about a campaign you take part in (including a reminder on the day) and messages about a gift (Art. 6 (1) (b) GDPR).

You receive news, promotions and prize draws by email only if you ticked the corresponding box at registration (Art. 6 (1) (a) GDPR). You can withdraw that consent at any time, via the link in any of those emails or by writing to us.

7. Cookies and local storage

We use no advertising or tracking cookies. After you sign in, your browser stores a login token and your language setting locally; both are technically necessary to run the portal (§ 25 (2) no. 2 TDDDG).

8. Disclosure to third parties

Your data is not passed on for commercial purposes. Processors acting on our behalf and under our instructions are our hosting provider (IONOS SE), service providers that deliver our emails, and parcel and shipping providers that deliver the gifts. Contracts under Art. 28 GDPR are in place with them. No transfer to countries outside the EU takes place.

9. Retention

We keep account data for as long as your account exists. You can have your account deleted at any time; your data is then erased unless statutory retention duties (for example for shipping records) require otherwise.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. Contact the address above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.