Version: July 2023
More information to download:
2. Name and contact details of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in member states of the European Union as well as other applicable provisions related to data protection is:
All questions, suggestions or complaints concerning data privacy may be, at any time, addressed to us via email.
3. Legal basis for data processing
Art. 6 (1) point a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6 (1) point b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.
Should our company be subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) point c GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured on our premises and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) point d GDPR.
Finally, processing operations could be based on Article 6 (1) point f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of affected data subject. In this case, all the necessary measures are adopted to make sure that the rights and freedoms of affected data subjects do not prevail over the legitimate interest pursued by ams OSRAM and that the respective analysis is duly documented.
5. Collection of general data
The website of ams OSRAM collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be the following data:
- the browser types and versions used,
- the operating system used by the accessing system,
- the website from which an accessing system reaches our website (so-called referrers),
- the sub-websites,
- the date and time of access to the Internet site,
- an Internet protocol address (IP address),
- the Internet service provider of the accessing system, and
- any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, ams OSRAM does not draw any conclusions about the identity of a data subject. Rather, this information is needed to:
- deliver the content of our website correctly,
- optimize the content of our website
- ensure the long-term viability of our information technology systems and website technology, and
- provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.
Therefore, ams OSRAM analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
If you decide to contact us via the options provided on the website, we will store your details so that we can refer to them when processing and responding to your inquiry. We do not pass this data on to third parties. Once the purpose for which the details have been collected no longer applies, we will erase the data.
6. Registration on our website
The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller. Further transfers of personal information are secured by the necessary contractual agreements envisaging appropriate technical and organizational measures to protect the data.
By registering on the website of the controller, the IP address—assigned by the Internet service provider (ISP) and used by the data subject—date, and time of the registration are also stored. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. Insofar, the storage of this data is necessary to secure the controller. This data is not passed on to third parties, unless there is a statutory obligation to pass on the data, or if the transfer serves the aim of criminal prosecution.
The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to offer the data subject contents or services that may only be offered to registered users due to the nature of the matter in question. Registered persons are free to change the personal data specified during the registration at any time, or to have them completely deleted from the data stock of the controller.
The data controller shall, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. In addition, the data controller shall correct or erase personal data at the request or indication of the data subject, insofar as there are no statutory storage obligations.
7. Subscription to our newsletter
On the website of ams OSRAM, users are given the opportunity to subscribe to our enterprise's newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
ams OSRAM informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping confirming that the related data processing is consented to. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.
The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time.
For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller, or to communicate this to the controller in a different way. You can revoke consent at any time without stating reasons by emailing (firstname.lastname@example.org) or by using the preference settings that are accessible via 'manage my subscriptions' at the bottom of the ams OSRAM optical solutions newsletter you received, with effect for the future. As a result, you will no longer be contacted by ams OSRAM via the respective communication channel for advertising purposes.
8. Newsletter tracking
The newsletter of ams OSRAM contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, ams OSRAM may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. Each user has to give his consent to the use of this tracking pixels.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. ams OSRAM automatically regards a withdrawal from the receipt of the newsletter as a revocation.
9. Contact possibility on website
The ams OSRAM website contains information that enables an electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact the controller by e-mail, via a contact form or via specific technical support contact forms (e.g. PASS, Foundry Design Support, Technical Support, Contact us), your personal data transmitted are automatically stored. Such personal data transmitted on a basis of a consent are stored for the purpose of processing or contacting the data subject. There is no further transfer of this personal data to third parties.
10. Data subject rights
Data subjects within the meaning of the GDPR have the following rights in relation to their personal data:
- Right of confirmation
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right of restriction of processing
- Right to data portability
- Right to object
- Right to withdraw data subject consent, if respective data processing is based thereon
To exercise the above rights, you may contact us at email@example.com. Data subjects also have a right to lodge a complaint with a supervisory authority at any time.
Responsible authority for OSRAM:
Bavarian State Office for Data Protection Supervision
Responsible authority for ams:
Austrian Data Protection Authority
11. Data protection provisions about the application of Google Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed and hosted locally. There is no connection to Google servers and no data of data subjects is transmitted to Google. More information on data processing carried out by Google is available here.
12. Data protection provisions on the use of YouTube
The ams OSRAM website contains integrated components (video clips) from YouTube, which is a video sharing platform managed by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. If you call up on one of the subpages of this site containing an integrated YouTube video clip, you Internet browser will be automatically prompted to download a display of the respective YouTube video clip. In course of this technical procedure, YouTube gains knowledge of what specific subpage of this site you visited. If you are a registered YouTube user and you are logged in into your YouTube account while visiting this webpage, each of your visit on a subpage containing YouTube component is assigned to your YouTube user profile. To prevent this from happening it is recommended to assign off from your YouTube account before entering the subpage containing a YouTube video clip. More information on data collection and processing by YouTube can be found here.
13. Data protection provisions on the use of the embedded Soundcloud player
Our website uses services of SoundCloud Limited & Co., Rheinsberger Str. 76/77, 10115 Berlin, Germany (“SoundCloud”) by embedding individual audio files (podcasts) from the platform on our website so that they can be played directly on our website.
If you carry out an opt-in on the SoundCloud player embedment frame installed on our webpage, a connection to the SoundCloud servers will be established and the audio file will be displayed on our website. This transmits to SoundCloud which website you have visited. In this case your personal data, including your IP address may be transmitted to SoundCloud. Once you click on the embedded audio file, this information is also sent to SoundCloud. Additionally, if you are logged in as a SoundCloud user, SoundCloud will assign this information to your account. The collected data may be used by SoundCloud for analytical purposes.
More information about data processing by SoundCloud can be found here.
14. Data protection provisions on the use of the LinkedIn Insight Tag
This website uses “LinkedIn Insight Tag” provided by LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”). This tool allows direct collection by “LinkedIn Ireland” of the following information: user’s URL, referrer URL, IP address, device and browser properties and page events. This data is then pseudonymised within seven days and later deleted within 90 days. Based on this data LinkedIn Ireland provides ams OSRAM with anonymous reports on targeted website audience and display performance. Additionally, LinkedIn offers the possibility of retargeting via the Insight Tag. ams OSRAM may use the data to display targeted advertising outside of its website to the website visitors without their identification as a LinkedIn member.
As “LinkedIn Ireland” may be processing your data in the USA, we are obliged to inform you that the USA does not provide adequate level of protection of data of the resident of the EU within the meaning of the GDPR.
You can manage your choices about application of LinkedIn Insight Tag in our Cookie Banner or in our Cookie Settings.
Additionally, LinkedIn members can control the use of their personal information for advertising purposes in their account settings or here (for non-members).
More information on data processing by LinkedIn can be found here.
15. Data protection provisions on the use of the Apple Podcasts
This page has an embedded Apple Podcasts web player, which is provide and maintained by Apple Inc. or its subsidiaries (further referred to as “Apple”). Apple collects information about where the web player is embedded and how you interact with it to understand how the web player is used and to improve the web player experience. This includes the domain of the embedding page, information about your browser or device, general geographic information based on your connecting IP address (we only store a truncated IP address), and what podcast you play.
If you have an Apple ID and are or were signed in using this browser to an Apple media service, such as Apple Music or Apple TV+, the information Apple collects may be associated with your Apple ID. If you do not have an Apple ID or are not signed in to an Apple media service on your web browser, this information is associated with a random unique identifier specific to the web player in your browser and the domain of the embedding page. The identifier resets after one day.
ams OSRAM is a podcast provider and regularly receives information about the use of Apple Podcasts web player from Apple in aggregate form which does not allow identification of listeners or visitors. In certain cases when you play or download podcast episodes from some podcast providers or use Siri to listen to an audio brief, ams OSRAM may be able to collect information about your use of their podcasts. In this case, data collection and use are governed by ams OSRAM privacy policies and practices.
16. Data recipients and transfers of data outside of the EU/EEA
We may share personal data with specialized service providers we engage. In this case, we carefully choose and regularly control our service providers according to applicable legal provisions. They process personal data only on our behalf and in strict accordance with our documented instructions on the basis of agreements on commissioned data processing. ams OSRAM warrants that all necessary legal arrangements are made to ensure security of personal data in case of subcontracting and that all engaged services providers are duly committed to confidentiality and data privacy.
In some cases, your data is also processed in countries outside the European Union (EU) or the European Economic Area (EEA) with a lower level of data protection than in Europe. In such cases, we ensure that an adequate level of protection for your data is guaranteed, such as by means of agreements with our contractual partners (based on the EU Standard contractual clauses), or we ask you for your explicit consent. We also may share personal information with our affiliates outside of Europe based on the ams OSRAM Binding Corporate Rules.
17. Storage periods
The criteria used to determine the period of storage of personal data is whether the respective data is necessary to achieve purposes of the respective processing activities (e.g. for performance of a contract). After expiration of that period, the corresponding data are routinely deleted, as long as they are no longer necessary to comply with statutory retention requirements.
18. Existence of automated decision-making
As a responsible company, ams OSRAM does not use automatic decision-making or profiling.
19. Contact us
You may, at any time, contact us at email directly with all questions and suggestions concerning data protection.