Data Privacy

Data Privacy Policy

As operator of the website www.emag.com, EMAG Systems GmbH, Austr. 24, 73084 Salach, Germany (phone: +49 7162 17-0 | fax: +49 7162 17-197 |e-mail: communicationsnoSpam@emag.com (referred to as “we” in the following) is responsible for processing the personal data of users (referred to as “you” in the following) of the website in accordance with art. 4 of the General Data Protection Regulation (referred to as "GDPR" in the following).
We protect your privacy and your personal data. We process your personal data in accordance with the terms of this Privacy Policy, taking into account the applicable data protection regulations.

If you have any questions regarding data protection, please contact our Data Protection Officer at privacynoSpam@emag.com. In this Privacy Policy, we inform you about which personal data we process. 

1. Collection of Personal Data

1.1 Personal data refers to any data that can be linked to you personally - that is, data from which your identity can be determined.

1.2 Personal data may also include information about your use of our website. As with any website, our server automatically and temporarily collects information in so-called server log files transmitted by your browser, unless you have disabled this feature. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Art. 6(1)(f) GDPR):

  • IP address of the requesting computer
  • File requested by the client
  • The HTTP response code
  • The website from which you are visiting us (referrer URL),
  • The time of the server request
  • Browser type and version
  • Operating system used by the requesting computer

The server log files are not analyzed to identify specific individuals. At no time can the provider associate this data with specific individuals. This data is not combined with other data sources.

2. Purpose of Use

We use your personal data for the following purposes:

2.1 To provide the services you have requested (receiving and processing your online inquiries or messages submitted via the contact form, receiving and processing document attachments, receiving and processing questions, messages, and offers - including via phone or email - or to initiate a business relationship), for which you voluntarily provide us with data. The legal basis for this is Article 6(1)(b) of the GDPR;

2.2 To ensure that our website is presented to you in the most effective and engaging way possible (e.g., storing display preferences, conducting our own market and opinion research). Where we obtain consent, the legal basis is Article 6(1)(a) of the GDPR (e.g., for tracking; see Section 3.6). In general, however, we base data processing on our legitimate interest as a company. We carefully weigh the interests involved to ensure that no risks arise for you. The legal basis for this is therefore Article 6(1)(f) of the GDPR;

2.3 To fulfill our obligations under any contracts concluded between you and us. The legal basis for this is Article 6(1)(b) of the GDPR;

2.4 To enable you to participate in interactive offerings, if you wish. The legal basis for this is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR, a prospective business relationship, and our legitimate, carefully balanced interests;

2.5 To inform you about changes to our services. The legal basis for this is Article 6(1)(f) of the GDPR, namely our legitimate interest in sharing information with you that is tailored to our relationship.

3. Information About Your Computer, Cookies, and Targeting

3.1 Each time you access our website, we collect the information listed in Section 1.2.

3.2 Under certain circumstances, we may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your device and that save certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, as well as information about the cookie’s age and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and make any preset preferences immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive of the user’s computer. Cookies help us improve our website and offer you a better and even more personalized service. For cookies that are necessary for the use of our website, the legal basis is Article 6(1)(f) of the GDPR, namely our legitimate interest in operating a functional website. The legal basis for cookies stored by partner companies (see Section 3.4) as well as for tracking cookies (see Section 3.4) is your consent, i.e., Article 6(1)(a) of the GDPR. They enable us to recognize your computer when you return to our website and thereby:

  • Store information about your preferred activities on the website and thus tailor our website to your individual interests. This includes, for example, advertising that corresponds to your personal interests;
  • To speed up the processing of your inquiries.

3.3 The cookies we use store only the data described above regarding your use of the website. This is not done by linking the data to you personally, but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not linked to your name, your IP address, or any similar data that would allow the cookie to be associated with you. See Section 3.5 to learn how you can prevent the use of browser cookies.

3.4 Our website uses so-called tracking technologies and cookies - including those from business partners - that help us make our online offerings and website more interesting for you.
These technologies make it possible to target Internet users who have already shown interest in our website with advertisements on our partners’ websites. These advertisements are displayed based on cookie technology and an analysis of previous usage behavior.
This analysis is conducted under a pseudonym; no usage profiles are merged with your personal data. The data collected via cookies is stored in the form of a cookie ID and enables our advertising partners to display interest-based advertising to you. The cookies used are automatically deleted after the specified time period. This is determined by our partners in each case. For more information, please refer to their privacy policies, which we list under the respective section in this statement. 

When you first visit our website, you will be asked whether you wish to consent to the use of cookies that collect personal data. You can either grant consent for all cookies (by clicking the “[ACCEPT ALL]” button) or customize your settings by clicking the “[SAVE SETTINGS]” button. There, you can decide whether to grant or deny consent for specific services or categories of services by selecting the appropriate buttons.
Consent is voluntary and may be revoked at any time with future effect under “[Customize Cookie Settings]” at the bottom of our website (the footer) or under Section 3.5 of this Privacy Policy by deselecting a previously selected button. Further information on blocking cookies via browser settings can also be found in Section 3.5.

3.5 If you do not wish to use browser cookies, you can configure your browser to prevent cookies from being stored. Please note that in this case you may not be able to use some aspects of the website. If you wish to accept only our own cookies, but not those of our service providers and partners, you can select the “Block third-party cookies” setting in your browser.

You can revoke your consent to the use of cookies for the future or grant new consents via the following link: Adjust cookie settings

3.6 Matomo

We have long used the privacy-friendly alternative technology Matomo (formerly Piwik) for web analytics, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, (“Matomo”), which utilizes cookie technology. The protection of your data is important to us, which is why we have additionally configured Matomo so that your IP address is recorded only in abbreviated form. We therefore process your personal usage data in an anonymized manner. It is not possible for us to identify you personally. For more information on Matomo’s terms of use and data protection regulations, please visit:  https://matomo.org/privacy/

3.7 Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Tag Manager allows us to manage and control website tags via a user interface. Google Tag Manager itself does not set any cookies and is used solely to integrate and control other services.
However, when Google Tag Manager loads, technically necessary data (e.g., IP address and technical connection data) may be transmitted to Google.
The services integrated via Google Tag Manager may, in turn, collect and process personal data. In this case, the respective data processing takes place solely on the basis of your separate consent in accordance with Art. 6(1) (a) of the GDPR and § 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act).
If personal data is transmitted to Google in connection with the use of Google Tag Manager, this is done on the basis of a data processing agreement pursuant to Article 28 of the GDPR. The applicable data protection provisions are set forth in Google’s Data Processing Terms.

Further information on data protection at Google can be found here: https://policies.google.com/privacy

3.8 Google Maps

On this website, we use Google Maps, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This allows us to display interactive maps directly on the website and enables you to conveniently use the map feature. The legal basis for the use of Google Maps is your consent, Article 6(1)(a) of the GDPR. No data is transferred to third parties before you grant us your consent. For more information on granting and revoking your consent, please see Section 3.5.

When you visit the website, Google receives the information that you have accessed the corresponding page of our website. In addition, the data listed in Section 1.2 of this statement is transmitted. This occurs irrespective of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out (even for users who are not signed in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

For more information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the provider’s privacy policy. There you will also find further information regarding your rights in this regard and settings options to protect your privacy: www.google.de/intl/de/policies/privacy .

3.9 Machineseeker

To display and provide listings for used machinery, we use content from the “Machineseeker” service, provided by the Machineseeker Group GmbH, Kronprinzenstraße 9, 45128 Essen, Germany (“Maschinensucher”). The legal basis is your consent, Art. 6(1)(a) GDPR.
No data will be transferred to third parties before you grant us your consent. For more information on granting and withdrawing your consent, please see Section 3.5.
Once you have given your consent, a connection to Machineseeker’s servers is established when you access the relevant pages. In the process, personal data (in particular your IP address and technical information about your browser and device) is transmitted to Machineseeker.

If you are logged in to a service provided by Machineseeker or the Machineseeker Group, the transmitted data can be directly associated with your respective user account. If you do not wish for such an association, you must log out before activating the content. Machineseeker may store the collected data as user profiles and use it for advertising, market research, and/or to tailor its offerings to your needs. Such analysis is conducted in particular (even for users who are not logged in) to display content tailored to your needs and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Machineseeker.

For more information on the purpose and scope of data collection and its processing by Machineseeker, please refer to the provider’s privacy policy: https://www.machineseeker.com/privacy/

3.10 Salesforce (CRM System)

We use the “Salesforce” Customer Relationship Management (CRM) system provided by Salesforce Inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA, to manage and process customer inquiries and to maintain customer relationships. The personal data collected in connection with contact inquiries is stored and processed in Salesforce. This includes, in particular, contact information and the content of communications.
Salesforce is used to efficiently process inquiries and organize our sales processes. The legal basis for processing is Article 6(1)(b) of the GDPR (contract or pre-contractual measures) and, where applicable, Article 6(1)(f) of the GDPR based on our legitimate interest in efficient customer management. Salesforce may also transfer personal data to third countries, in particular to the United States. The data transfer is based on the EU Standard Contractual Clauses pursuant to Article 46 of the GDPR and, where applicable, additional appropriate safeguards.
We have entered into a data processing agreement with Salesforce in accordance with Article 28 of the GDPR.

For more information, please see Salesforce’s Privacy Policy: https://www.salesforce.com/company/legal/privacy/

3.11 Social Networks (Links)

On our website, you will find links to the social networks Facebook, X, Instagram, TikTok and LinkedIn. Unlike social media plug-ins (such as Facebook’s “Like” button), personal connection data is only generated when you access the respective social network by clicking on the link.

3.11.1 Facebook

This website includes links to the social network Facebook. The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The links include both a direct link to our Facebook profile and so-called “Share” links, which allow you to share content from this website on Facebook. When you visit our website, no connection is established with Facebook’s servers. Data is only transmitted to Facebook once you actively click on one of the links mentioned. By clicking on such a link, you leave our website and are redirected to a Facebook page. From that point on, the processing of personal data is the sole responsibility of Facebook. Please note that we have no knowledge of the content of the data transmitted in this process or of its use by Facebook.

For analytical purposes, we review aggregated and anonymized statistics provided by the platform (e.g., the number of subscribers/followers and how that number changes over time). This data is provided by the platform in summary form and does not allow us to identify individual users. The processing serves exclusively to monitor overall performance and to conduct a basic assessment of the reach of our social media activities. We do not conduct any further analysis of user behavior or create user profiles.
The legal basis for this data processing is Article 6(1)(f) of the GDPR (legitimate interest in evaluating and optimizing our online presence).

For more information on how your personal data is handled, please see Facebook’s Privacy Policy at: https://www.facebook.com/privacy/policy/version/25238980265745528/

3.11.2  X 

This website contains links to the social network X. The service provider is X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The links include both a direct link to our profile on X and so-called “share” links, which allow content from this website to be shared on X. When you visit our website, no connection is established with X’s servers. Data is only transmitted to X once you actively click on one of the links mentioned. By clicking on such a link, you leave our website and are redirected to a page on X. From that point on, the processing of personal data is the sole responsibility of X. Please note that we have no knowledge of the content of the data transmitted in this process or of its use by X.

For analytical purposes, we review aggregated and anonymized statistics provided by the platform (e.g., the number of subscribers/followers and how that number changes over time). This data is provided by the platform in summary form and does not allow us to identify individual persons. The processing serves exclusively to monitor the overall success and to conduct a basic assessment of the reach of our social media activities. We do not conduct any further analysis of user behavior or profiling.
The legal basis for this data processing is Article 6(1)(f) of the GDPR (legitimate interest in evaluating and optimizing our online presence).

For more information on how your personal data is handled, please see X’s Privacy Policy at: https://x.com/en/privacy
You can change your privacy settings on X in your account settings at https://x.com/settings/account.

3.11.3 Instagram

This website contains links to the social network Instagram. The service provider is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The links include both a direct link to our Instagram profile and, where applicable, so-called “share” links that allow you to share content from this website via Instagram. When you visit our website, no connection is established with Instagram’s servers. Data is only transmitted to Instagram once you actively click on one of the links mentioned. By clicking on such a link, you leave our website and are redirected to an Instagram page. From that point on, the processing of personal data is solely the responsibility of Instagram. Please note that we have no knowledge of the content of the data transmitted in this process or of its use by Instagram.

For analytical purposes, we review aggregated and anonymized statistics provided by the platform (e.g., the number of subscribers/followers and how that number changes over time). This data is provided by the platform in summary form and does not allow us to identify individual users. The processing serves exclusively to monitor the overall success and to evaluate the reach of our social media activities. We do not conduct any further analysis of user behavior or profiling.
The legal basis for this data processing is Article 6(1)(f) of the GDPR (legitimate interest in evaluating and optimizing our online presence).

For more information on data processing by Instagram, please see Meta’s Privacy Policy at: https://privacycenter.instagram.com/policy

3.11.4 TikTok

On our website, you will find a link to our profile on the social network TikTok. The service is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. This integration consists solely of a simple external link. When you visit our website, no connection is established with TikTok’s servers. Data is not transmitted to TikTok until you actively click on the link. By clicking the link, you leave our website and are redirected to a TikTok page. From that point on, the processing of personal data is solely the responsibility of TikTok. Please note that we have no knowledge of the content of the data transmitted in this process or how TikTok uses it.

For analytical purposes, we review aggregated and anonymized statistics provided by the platform (e.g., the number of subscribers/followers and how that number changes over time). This data is provided by the platform in summary form and does not allow us to identify individual users. The processing serves exclusively to monitor the overall success and to conduct a basic assessment of the reach of our social media activities. We do not conduct any further analysis of user behavior or profiling.
The legal basis for this data processing is Article 6(1)(f) of the GDPR (legitimate interest in evaluating and optimizing our online presence).

For more information on data processing by TikTok, please see TikTok’s Privacy Policy at: https://www.tiktok.com/legal/page/eea/privacy-policy/en

3.11.5 LinkedIn
This website contains links to the social network LinkedIn. The service provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The links include both a direct link to our LinkedIn profile and, where applicable, so-called “share links” that allow content from this website to be shared via LinkedIn. When you visit our website, no connection is established with LinkedIn’s servers. Data is only transmitted to LinkedIn once you actively click on one of the links mentioned. By clicking on such a link, you leave our website and are redirected to a LinkedIn page. From that point on, the processing of personal data is the sole responsibility of LinkedIn. Please note that we have no knowledge of the content of the data transmitted in this process or of its use by LinkedIn.

For analytical purposes, we review aggregated and anonymized statistics provided by the platform (e.g., the number of subscribers/followers and how that number changes over time). This data is provided by the platform in summary form and does not allow us to identify individual users. The processing serves exclusively to monitor the overall success and to conduct a basic assessment of the reach of our social media activities. We do not conduct any further analysis of user behavior or profiling.
The legal basis for this data processing is Article 6(1)(f) of the GDPR (legitimate interest in evaluating and optimizing our online presence).

For more information on how your personal data is handled, please see LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy

3.12 Social Networks (Embedded Videos)

We embed videos from YouTube, Douyin, and Youku on our website. These videos are embedded using so-called iFrames, which allow external content to be displayed directly on our website.
To protect your personal data, we use a so-called content blocker. This means that when you visit our website, no connection is initially established with the servers of the respective providers, and no personal data is transmitted. Data is only transmitted to the respective provider once you give your consent and actively enable the content. Only after this authorization is a connection established to the servers of the respective service. In particular, your IP address and other technical information may be transmitted to the provider. If you subsequently play a video or interact with it, additional data processing operations may be triggered over which we have no control. The processing of personal data in this regard is the responsibility of the respective provider.
We use these embedded videos solely to distribute our video content. We analyze the data only on a statistical and anonymized basis. 

For more information on data processing by the individual providers, please refer to their respective privacy policies, which we provide in the following sections.

3.12.1 YouTube

To display our videos, we use the video service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“YouTube”). The legal basis is your consent, Art. 6(1)(a) GDPR. No data is transferred to third parties before you grant us your consent. For more information on granting and revoking your consent, please see Section 3.5.

Embedded YouTube videos can also be hidden using browser add-ons, preventing YouTube from collecting data. If you are signed in to Google, your data will be directly associated with your account. If you do not want this data to be associated with your YouTube profile, you must sign out before clicking the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver personalized advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.
For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: https://policies.google.com/privacy?hl=en.

In addition, we analyze publicly available as well as aggregated and anonymized statistical data provided by YouTube regarding our own YouTube channels (e.g., views, number of subscribers, number of published videos, and other channel-related metrics). These analyses are used to measure reach, evaluate performance, and optimize our content. We do not process the personal data of individual users in this context. To the extent that personal data is processed through the use of YouTube itself, this is done exclusively by YouTube or Google as independent data controllers in accordance with their privacy policies.
The legal basis for our own analyses is Article 6(1)(f) of the GDPR (legitimate interest in analyzing and optimizing our online presence), unless consent is required.

3.12.2 Youku

Our website incorporates features and content from the video service Youku, a video service provided by the Alibaba Group (specifically Youku Tudou Inc., a subsidiary of Alibaba Group Holding Limited based in Beijing, China) (“Youku”). This integration is intended to display video content and improve the user-friendliness of our website.
When embedded Youku videos are played, a connection is established to servers in the People’s Republic of China. No data is transferred to third parties before you grant us your consent. For more information on granting and revoking your consent, please see Section 3.5. Once you have consented to view the video, technical data such as your IP address, browser and device information, and information regarding the time of access will be transmitted to Youku. This data is necessary to correctly display and play the video you have requested. When an embedded video is played, Youku also receives information about which of our pages you have visited. If you are logged in to Youku, Youku can associate this data with your personal profile. If you do not wish for such association, you must log out of your Youku account before activating the content.

Since the processing of personal data takes place in the People’s Republic of China, your data is transferred to a third country that does not have an adequate level of data protection within the meaning of the GDPR. It cannot be ruled out that government authorities in China may access your data in accordance with the laws in effect there. You have been informed of the risks associated with such a transfer; therefore, data transfer takes place exclusively on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act). You may revoke your consent at any time via our consent management tool. After revocation, Youku content will no longer be loaded.

Further information on the handling of user data can be found (in Chinese) in Youku’s Privacy Policy at:  https://h5.m.youku.com/app/flsm.html.

3.12.3 Douyin

Our website incorporates content from the Douyin service, a service provided by Beijing Douyin Information Service Co., Ltd., Beijing, People’s Republic of China, a subsidiary of ByteDance Ltd. (“Douyin”). This integration serves to display video content and improve the user-friendliness of our website. The integration of Douyin is based exclusively on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act). Without your consent, no connection to Douyin is established, and no personal data is transferred. When you visit a page that includes Douyin content, personal data such as your IP address, browser and device information, the time of access, and interactions with the embedded content may be transmitted to Douyin. This data is processed on servers in the People’s Republic of China. Since there is no adequacy decision by the European Commission for China, a level of data protection comparable to that of the EU cannot be guaranteed. In particular, it cannot be ruled out that government agencies may access the data in accordance with the laws applicable in China, including the Personal Information Protection Law (PIPL).

You have been informed of the risks associated with such a transfer; therefore, data is transferred exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (Telecommunications Digital Services Data Protection Act).
You may withdraw your consent at any time via our consent management tool. In this case, Douyin content will be automatically disabled.

For more information on data processing by Douyin, please see the privacy policy at:  https://www.douyin.com/privacy/

3.13 LinkedIn Insight Tag and Marketing Solutions

We use services provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”) on our website. Our website uses the “LinkedIn Insight Tag” as well as features from “LinkedIn Marketing Solutions” (formerly LinkedIn Ads). These are tracking and analytics tools that allow us to:

  • analyze the use of our website
  • measure the effectiveness of our advertisements
  • be able to serve interest-based ads on LinkedIn

In particular, the following data is processed:

  • IP address
  • Device and browser information
  • Page views and interactions on our website

LinkedIn uses cookies and similar technologies for this purpose, which enable your browser to be recognized. We receive from LinkedIn only aggregated and anonymized reports on the use of our website and the performance of our advertisements.
The use of the above-mentioned services is based solely on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time via our consent management tool (cookie banner). It cannot be ruled out that data may also be transferred to the United States by LinkedIn. The data transfer is based on the EU Commission’s Standard Contractual Clauses pursuant to Article 46 of the GDPR. Nevertheless, there is a risk that a level of data protection comparable to that of the EU cannot be guaranteed in the United States.

For more information on data protection at LinkedIn, please visit: https://www.linkedin.com/legal/privacy-policy

3.14 Issuu

On our website, we use services provided by Issuu, Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA (“Issuu”). This integration is used to display digital publications (e.g., catalogs or magazines) and to improve the user-friendliness of our website.
The legal basis is your consent, Art. 6(1)(a) GDPR. No data is transferred to third parties before you grant us your consent. For more information on granting and revoking your consent, see Section 3.5.

When you visit a page that includes Issuu content, your browser establishes a connection to Issuu’s servers. In the process, personal data - in particular your IP address and technical information about your browser and device - may be transmitted to Issuu. To the best of our knowledge, Issuu uses cookies and analytics tools to analyze user behavior. We have no influence over the scope or further processing of the data collected by Issuu. The data collected by Issuu is processed on servers in the United States. An adequacy decision by the European Commission (EU-U.S. Data Privacy Framework) applies to the United States, provided that the provider is certified accordingly. However, it cannot be ruled out that, in individual cases, data may also be processed outside of this framework.
You can revoke your consent at any time via our Consent Management Tool. After revocation, Issuu content will no longer be loaded.

For more information on Issuu’s use of cookies, please visit:  https://issuu.com/legal/cookies. Issuu’s privacy policy can be found here:  https://issuu.com/legal/privacy.

3.15 Google reCAPTCHA (Part of Google Cloud Fraud Defense)

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is designed to verify whether data entry on this website (e.g., in a contact form) is performed by a human or by an automated program. To do this, reCAPTCHA analyzes the website visitor’s behavior based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, the duration of the website visitor’s stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. In this context, Google acts as our service provider, and a corresponding agreement regarding so-called data processing on our behalf has been concluded. Thus, the data remains protected in accordance with the GDPR and remains under our responsibility. Google is not permitted to use the data for its own purposes. The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated surveillance and from spam. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG (Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
For more information about Google reCAPTCHA, please refer to Google’s Privacy Policy and Terms of Service at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

3.16 CloudFlare

We use the “Cloudflare” service for DNS resolution. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare provides a globally distributed Domain Name System (DNS). When you visit our website, your browser’s request is processed via Cloudflare’s DNS servers to establish a connection to our web server. In particular, the IP address, timestamp, and technical information regarding the requested domain may be processed during this process. Cloudflare is not used as a content delivery network. Cloudflare acts as a data processor in this context. A data processing agreement in accordance with Article 28 of the GDPR has been concluded with Cloudflare.
The processing of personal data may also take place in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework. The European Commission has issued an adequacy decision for this framework, meaning that data transfers on this basis are permitted under Article 45 of the GDPR. Our use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6(1)(f) of the GDPR).

For more information on security and data protection at Cloudflare, please visit: www.cloudflare.com/privacypolicy/ .

3.17 KeyCDN

We use the “KeyCDN” Content Delivery Network (CDN) to deliver the content of our website. The provider is KeyCDN AG, Reichenauweg 1, 8272 Ermatingen, Switzerland (hereinafter “KeyCDN”). KeyCDN is a globally distributed network of servers that helps deliver our website’s content - particularly static content such as images, stylesheets, or scripts - to users’ devices more quickly and reliably. For this purpose, KeyCDN processes, in particular, the user’s IP address and technical access data (e.g., the time of access and the requested resource). KeyCDN acts as a data processor. A data processing agreement in accordance with Article 28 of the GDPR has been concluded with the provider.
The provider is based in Switzerland. The European Commission has issued an adequacy decision for Switzerland pursuant to Article 45 of the GDPR, meaning that the transfer of personal data to that country is permitted without additional safeguards.

The use of KeyCDN is based on our legitimate interest in the secure and high-performance delivery of our online services (Article 6(1)(f) of the GDPR).
For more information on data protection at KeyCDN, please visit: https://www.keycdn.com/privacy.

3.18 d.vinci

If you apply for a job through this website, personal data that you provide to us as part of your application is collected via our applicant tracking system. To manage applications, we use the system provided by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg (“d.vinci”). Job postings on our website are therefore displayed via the applicant tracking system of d.vinci HR-Systems GmbH. In this process, content from d.vinci is technically integrated into our website. This integration may result in data (e.g., your IP address) being transmitted to d.vinci as soon as you access the job postings.
For this reason, the job postings are only displayed after you have given your consent via the cookie banner. The legal basis for the integration and the associated data transfer is Article 6(1)(a) of the GDPR (your consent). Without this consent, the corresponding content will not be loaded.

The purpose of data processing is to carry out the application process. The legal basis is therefore Article 6(1)(a) (your consent) and (b) (our joint interest in the conclusion of an employment contract) of the GDPR. 
Further information can be found in the provider’s privacy policy at the following URL:  https://www.dvinci.de/en/datenschutz/.

4. Collection and Processing of Voluntarily Provided Data

4.1 Recruitment Portal
4.1.1 General

Through our careers page, you can apply on your own initiative or in response to specific job postings. To do so, we offer you the option to use our d.vinci recruitment portal. Your data (last name, first name, home address, resume, professional history, certificates, proof of qualifications, severe disability, cover letter) will be processed only in connection with the respective job posting (Art. 6(1)(b) GDPR, § 26 BDSG (Section 26 Data processing for employment-related purposes)) or within the scope of the consent you have provided for use in connection with other job openings (Art. 6(1)(a) GDPR). If you have given us your consent to process your application data, you may revoke this consent at any time. No automated preliminary decision regarding your application will be made.

4.1.2 Involvement of Third-Party Providers in the Application Process

To simplify the application process, we offer you the following alternative options, in which third-party providers assist with data entry:

  • so-called CV parsing,
  • the use of your LinkedIn profile,
  • using your XING profile, or
  • uploading from your Dropbox.

You are not required to use these options to apply with us; you may also fill out the fields manually. In this case, no data processing by third parties will take place.

CV parsing is a feature that automatically extracts application-relevant data from a resume you upload and inserts it into the fields of the application form. To use CV parsing, select the “Upload Resume” button and follow the instructions. For this service, we use an applicant tracking system provided by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg (“d.vinci”). d.vinci uses a product from Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, Netherlands. We have entered into a data processing agreement with d.vinci (Art. 28 GDPR). d.vinci is bound by our instructions and does not use your data for its own purposes. Textkernel BV is a subprocessor of d.vinci and is bound by a data processing agreement pursuant to Art. 28 GDPR to follow d.vinci’s instructions and, therefore, indirectly to our instructions regarding the processing of your data.

To transfer data from your LinkedIn profile, select the “Use LinkedIn Profile” button during the application process and follow the further instructions. If you have set up a LinkedIn profile, LinkedIn will, at your request, transfer the stored data to us. LinkedIn itself collects and processes data and, if applicable, links it to your existing profile when you use this option. The transfer of data to LinkedIn is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely used services. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For information on LinkedIn’s privacy policy, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

To transfer data from your XING profile, select the “Use XING Profile” button during the application process and follow the instructions. If you have set up a XING profile, XING will then - to the extent available - transfer to us the data requested in the application form and provided by you on XING. The application form will then be pre-filled with your data, but you can still make corrections and additions. XING also collects and processes data on its own and, if applicable, links it to your existing account if you use this option. The transfer of data to XING is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in designing an attractive and straightforward application process. To reach as many applicants as possible and lower the barriers to submitting an application, we integrate the XING portal, which is widely used as a professional and business network. XING is a service provided by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Information on data processing at XING SE is available at  https://privacy.xing.com/en/privacy-policy.

To submit a resume to us that you have previously uploaded to Dropbox, please select the “Resume on Dropbox” button during the application process and follow the instructions provided. Dropbox will then, at your request, send us the resume you previously uploaded. Dropbox itself collects and processes data and may link it to your Dropbox account if you use this option. The transfer of data to Dropbox is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely used services. Dropbox is a service provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. Information on Dropbox’s privacy policy is available at  https://www.dropbox.com/privacy.

4.1.3 Note on Sensitive Data

You are expressly advised that job applications - in particular resumes, transcripts, and other data you submit to us - may contain particularly sensitive information regarding mental and physical health, ethnic origin, political opinions, religious or philosophical beliefs, membership in a labor union or political party, or sexual life.
If you provide us with such information in your online application, you expressly consent to our processing of this data for the purpose of handling your application. This data will be processed in accordance with this Privacy Policy and other applicable legal provisions. Depending on your application, we may transfer your data to affiliated company locations in third countries. The legal basis for this is Article 49(1)(b) or (c) of the GDPR.

4.1.4 Deletion

The data you provided will be deleted six months after the conclusion of the application process. If legal provisions preclude deletion, if further storage is necessary for evidentiary purposes, or if you have consented to longer-term storage, the data may be stored for a longer period.

4.1.5 Consent to EMAG Group-wide Application

When submitting your application, you can give your consent to an EMAG Group-wide application process by checking the “Consent to Extended Use” checkbox. Your personal data may then be shared within the EMAG Group. This includes the following companies:

  • EMAG Salach GmbH, Austr. 24, 73084 Salach
  • EMAG Systems GmbH, Austr. 24, 73084 Salach
  • EMAG KOEPFER GmbH, Siederstr. 49, 78054 Villingen-Schwenningen
  • EMAG LaserTec GmbH, Am Flugplatz 1, 73540 Heubach
  • EMAG ECM GmbH, Am Flugplatz 1, 73540 Heubach
  • EMAG Zerbst Maschinenfabrik GmbH, Norbert-Heßbrüggen-Str. 11, 39261 Zerbst
  • EMAG Milano Srl, Via die Mille 31, 20098 San Giuliano Milanese, IT
  • EMAG Salach GmbH - Branch in Spain, Pasaje Arrahona, No. 18, Santiga Industrial Park, 08210 Barberà del Vallès (Barcelona), Spain
  • EMAG Salach GmbH - Branch in France, 5 Avenue de L'Europe, 18150 La Guerche sur L'Aubois, France
  • EMAG SU S.r.l., Via die Mille 31, 20098 San Giuliano Milanese, IT
  • EMAG LLC, 38800 Grand River Avenue, Farmington Hills, MI 48335, USA
  • EMAG (China) Machinery Co., Ltd., Sino-German Advanced Manufacturing Technology International Innovation Park, Building No. 2, No. 101, Chenmeng Jing Road, 215400 Taicang, Jiangsu, China
  • EMAG (China) Machinery Co., Ltd., No. 2888, Nan Er Huan East Road, Economic Development Zone, 213200 Jintan, Changzhou City, Jiangsu Province, China
  • EMAG (Chongqing) Intelligent Technology Co., Ltd., Building No. 7, 24 Fangzheng Avenue, Beibei District, 400714 Chongqing, China
  • EMAG India Pvt. Ltd., No. 17/G/46-3, Industrial Suburb, 2nd Stage, Yeshwantpur, 560022 Bangalore, India
  • EMAG Korea Ltd., Room 204, Biz Center, SKn Technopark, 190-1, Sangdeawon-dong, 13207 Seongnam City, Gyeonggi-do, South Korea
  • EMAG do Brasil Ltda., Neo Corporate Offices Building, Suite 1503, Rua Enxovia, 472, 04711-030 São Paulo, Brazil
  • Maquinaria EMAG México S de RL de CV, Parque Paseo del Lago 210, San Isidro Business Park, 76223 Santa Rosa de Jáuregui, Querétaro, Mexico
  • EMAG Middle East FZCO, IFZA Business Park - Building A3, Dubai, United Arab Emirates

This means your application may also be used by other EMAG companies when searching for suitable candidates for other job openings. For companies located in countries outside the European Union, Section 5 applies. If a position within the EMAG group matches your profile, the responsible manager will have access to your data. By giving your consent, you expressly agree that you may be contacted by EMAG group employees as part of a recruitment process. We will store your data until the application process is complete, but for no longer than six months. You may revoke your consent at any time with future effect by sending an email to  privacynoSpam@emag.com.

4.2 Newsletter

You can subscribe to our newsletter, which we use to provide information about current offers that may be of interest to you.  These primarily include new products in the field of metal manufacturing systems, industry news, and event announcements.
We use the so-called double opt-in procedure for newsletter sign-ups. This means that after you sign up, we will send an email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of your registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.

If you contact us via our newsletter form, the information you provide in the form - including the contact details you enter there - will be stored and processed by us for the purpose of processing your registration.
The following data is collected:
• Email address 
• Company
• Country
• State/province (if applicable)
• ZIP code
You may voluntarily provide us with additional information.
This data is processed based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke this consent at any time.

To process your registration, we use a customer relationship management (CRM) system provided by Salesforce. The data you submit via the form is transferred to this system and stored there. Your contact information is assigned to the appropriate sales representative based on the ZIP code you provided and, if applicable, the state or province.
The following processing procedures apply:

  • Existing contacts: Your registration will be added to your existing record. Your data will be stored and processed in accordance with the data protection regulations applicable to existing contacts. You will be informed regularly - at least every two years - about the storage of your data.
  • New contacts (leads): Your registration is initially recorded as a lead in the CRM system. If the lead is converted into an existing contact within three months (e.g., as part of a business relationship), the applicable data protection regulations for contacts will apply from that point onward. If no conversion occurs within this period, the lead - including the associated inquiry - will be completely deleted after three months.

The data you enter in the form will otherwise remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected. In addition, every marketing email we send includes a simple opt-out option that allows you to object to receiving further promotional emails at any time.

4.3 Contact Form

If you submit inquiries to us via the contact form, the information you provide in the inquiry form - including the contact details you enter there - will be stored and processed by us for the purpose of handling your inquiry and in case of follow-up questions.
The following data is collected:
• Email address 
• Company
• Country
• State/Province (if applicable)
• ZIP code
• Content of the message you are sending us
You may voluntarily provide us with additional information.
This data is processed on the basis of Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. If your inquiry is a general contact without a specific contractual basis, your data will be processed based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke this consent at any time.

To process your inquiry, we use a customer relationship management (CRM) system provided by Salesforce. The data you submit via the contact form is transferred to this system and stored there. Your inquiry is assigned to the appropriate sales representative based on the zip code you provided and, if applicable, the state or province.
The following processing procedures apply:

  • Existing contacts: Your inquiry will be added to your existing record. Your data will be stored and processed in accordance with the data protection regulations applicable to existing contacts. You will be informed regularly - at least every two years - about the storage of your data.
  • New contacts (leads): Your inquiry is initially recorded as a lead in the CRM system. If the lead is converted into an existing contact within three months (e.g., as part of a business relationship), the applicable data protection regulations for contacts take effect from that point onward. If no conversion occurs within this period, the lead - including the associated inquiry - will be completely deleted after three months.

The data you enter in the contact form will otherwise remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.

Job applications should not be submitted via the contact form but exclusively through our applicant tracking system (d.vinci).

4.4 Media Center

If you register via our media center form to download additional content, we will store and process the information you provide in the form - including the contact information you provide there - for the purpose of processing your registration.
The following data is collected:
• Email address 
• Company
• Country
• State/Province (if applicable)
• ZIP code
You may voluntarily provide us with additional information. This data is processed based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke this consent at any time.

To process your registration, we use a customer relationship management (CRM) system provided by Salesforce. The data you submit via the form is transferred to this system and stored there. Your contact information is assigned to a responsible sales representative based on the ZIP code you provided and, if applicable, the state/province.
The following processing procedures apply:

  • Existing contacts: Your registration will be added to your existing record. Your data will be stored and processed in accordance with the data protection regulations applicable to existing contacts. You will be informed regularly - at least every two years - about the storage of your data.
  • New contacts (leads): Your registration is initially recorded as a lead in the CRM system. If the lead is converted into an existing contact within three months (e.g., as part of a business relationship), the applicable data protection regulations for contacts take effect from that point onward. If no conversion occurs within this period, the lead - including the associated inquiry - will be completely deleted after three months.

The data you enter in the form will otherwise remain with us until you request its deletion, object to its processing, or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular statutory retention periods - remain unaffected. 

4.5 Livestorm

We use the services of Livestorm, 24 rue Rodier, 75009 Paris, France, for our webinars. When you register via Livestorm, we generally collect your first and last name and your email address. By registering through this service, you enable us to send you all the information you need to participate in our webinars. For more information, please visit the provider’s privacy policy:  https://livestorm.co/privacy-policy/.

5. Data Security

All information you provide to us is stored on servers located within the European Union. Unfortunately, the transmission of information over the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we protect our website and other systems against the loss, destruction, unauthorized access, alteration, or disclosure of your data through technical and organizational measures. In particular, your personal data is transmitted to us in encrypted form. We operate the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption systems for this purpose.

6. No Disclosure of Your Personal Data

We do not disclose your personal data to third parties unless you have consented to such disclosure (see Art. 6(1)(a) GDPR) or we are entitled or obligated to disclose data pursuant to legal provisions and/or official or court orders. This may include, in particular, the disclosure of information for the purposes of criminal prosecution, to prevent danger, or to enforce intellectual property rights.

7. Duration of Storage

Your data will only be used for as long as necessary for the existing customer relationship, unless you have given us your consent, or we have a legitimate interest in further processing. For more details, please refer to the relevant sections of this Privacy Policy. Notwithstanding this, we are required by commercial and tax law to store your address, payment, and order data for a period of ten years for each business transaction.

8. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time with future effect. The most current version is available on the website. 

9. Your Rights and Contact Information

You generally have the following rights under the GDPR. For any questions please feel free to contact us at communications@emag.com or reach out to our Data Protection Officer at privacynoSpam@emag.com.

Right of Access
You have the right to obtain information at any time about your personal data stored by us.

Right to Withdraw Consent
You have the right to withdraw your consent to the processing of personal data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data immediately, unless further processing can be based on another legal basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.

Right to Object
If we process your personal data on the basis of our overriding legitimate interest after balancing the interests, you have the right at any time to object to this processing with future effect for reasons due to your particular situation.
If you exercise your right to object, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.
Please feel free to contact our customer service at any time via communicationsnoSpam@emag.com or at the address listed in Section 1. You may also contact our Data Protection Officer at any time via email at privacynoSpam@emag.com with any questions, comments, or complaints.

Right to Data Portability
You have the right to request that we transfer your personal data to another party. 

Right to Rectification, Erasure, or Restriction of Processing
You have the right to have your personal data corrected, erased, or to restrict its processing.

Right to File a Complaint
You have the right to file a complaint with a supervisory authority or with our company if you have grounds for doing so. To exercise your rights with respect to our company, please contact the individuals listed at the end of this Privacy Policy.
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, 70025 Stuttgart, Tel. 0711 6155 410,  poststellenoSpam@lfdi.bwl.de.

© EMAG Systems GmbH, 2026