Privacy Policy

(1)In the following, we inform you about the collection of personal data when using our website and our online services. Personal data includes all data that can be related to you personally, such as name, address, email addresses, and user behavior.

(2)The controller, according to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR), is:

dormakaba International Holding AGHofwisenstrasse 24 8153 Rümlang, Switzerland

You can reach our Data Protection Officer atdata.protection@dormakaba.comor by mail to our address with the addition "Data Protection Officer".

(3)If you contact us via email or a contact form, we store the data you provide (your email address, and if applicable, your name and phone number) to answer your questions. We delete the data collected in this context once it is no longer necessary, or we restrict processing if there are legal retention requirements.

(4)If we use contracted service providers for individual features of our offering or intend to use your data for advertising purposes, we will inform you in detail below about the respective procedures. We also specify the criteria for the storage duration.

A. Your Rights

You have the following rights with respect to your personal data:

• Right to access,

• Right to rectification or deletion,

• Right to restriction of processing,

• Right to object to processing,

• Right to data portability,

• Right to lodge a complaint with a supervisory authority.

B. Collection of Personal Data When Visiting Our Website

(1)If you use the website for informational purposes only (i.e., without registering or transmitting information), we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data that is technically necessary to display our website and ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

• IP address,

• Date and time of the request,

• Time zone difference to Greenwich Mean Time (GMT),

• Content of the request (specific page),

• Access status/HTTP status code,

• Amount of data transferred,

• Website from which the request originates,

• Browser,

• Operating system and its interface,

• Language and version of the browser software.

(2)In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard drive associated with the browser you use, providing certain information to the party setting the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.

(3) Use of Cookies:

a)This website uses the following types of cookies, the scope and functionality of which are explained below:

• Transient cookies (see b)

• Persistent cookies (see c).

b)Transient cookies are automatically deleted when you close the browser, particularly session cookies. These store a so-called session ID that allows various requests from your browser to be assigned to the same session, enabling your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c)Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

d)You can configure your browser settings according to your preferences and, for example, refuse third-party cookies or all cookies. Please note that you may not be able to use all features of this website if you do so.

e)The Flash cookies used are not collected by your browser but by your Flash plugin. We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data independently of your browser and have no automatic expiration date. To prevent the processing of Flash cookies, you must install a corresponding add-on. You can prevent the use of HTML5 storage objects by activating the private mode in your browser. We also recommend regularly deleting your cookies and browser history manually.

(f)This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google").

(g)On this website, we use cookies from Account Engagement (Pardot), a marketing automation tool from Salesforce. These cookies enable us to recognize users who visit our website, analyze their surfing behavior and measure the effectiveness of our campaigns. The information collected is used exclusively for our own analysis and marketing purposes and is not passed on to third parties for other purposes.

You can manage your cookie settings at any time via the settings menu or your browser options.

(h)Use of the AI-supported chatbot service (ChatBot.com/Text, Inc.)

We use an AI-based chatbot service to support information searches on our Swiss website. This is provided by ChatBot.com, a service of Text, Inc. located at 101 Arch Street, 8th Floor, Boston, MA 02110, United States of America. The chatbot provides automated answers to frequently asked questions and draws on publicly accessible content from our website. Personal communication with our employees is currently not available.

When using the chatbot, the following data items, among others, are processed:

• IP address and device information

• Time and duration of the interaction

• Chat history (questions & answers)

• Browser and location data (if available)

• Any personal data entered voluntarily

This data is processed based on our legitimate interest in the efficient, automated and user-friendly provision of information in accordance with Art. 6 para. 1 lit. f of the GDPR.

Note on data transfer to third countries:As Text, Inc. is based in the United States, personal data may be transferred to a third country outside the EU/EEA. In this case, the general principles of data transmission in accordance with Art. 44 ff. of the GDPR are complied with. Further information on data processing by Text, Inc. can be found in the corresponding privacy policy.

Before using the chatbot, you will be informed about the data processing to occur. You can change your preferences at any time in the cookie settings or you can leave the chat.

If you have any questions, please contact our data protection officer at data.protection@dormakaba.com.

C. Google Analytics

As long as you have consented, Google Analytics, a web analysis service of Google LLC, is used on this website. In the EU, the responsible service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

(1) Extent of ProcessingGoogle Analytics uses cookies to enable analysis of your use of our website. The information collected via cookies about your use of this website is generally transmitted to and stored on a Google server in the USA. We use the ‘anonymizeIP’ function (IP masking): due to the activation of IP anonymization on this website, your IP address is shortened by Google within member states of the European Union or in other contracting states of the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within Google Analytics is not combined with other Google data. During your website visit, the following data is collected, among others:

• Pages you accessed, your "click path"

• Achievement of "website goals" (conversions, such as newsletter sign-ups, downloads, purchases)

• Your user behavior (e.g., clicks, time spent, bounce rates)

• Your approximate location (region)

• Your IP address (in shortened form)

• Technical information about your browser and devices (e.g., language settings, screen resolution)

• Your internet provider

• The referrer URL (the website or advertising medium you came from to reach this website)

(2) Purposes of ProcessingOn behalf of this website’s operator, Google will use this information to analyze your (pseudonymous) use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

(3) RecipientThe data recipient is: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor. For this, we have concluded a data processing agreement with Google. Google LLC, based in California, USA, and potentially U.S. authorities can access the data stored by Google.

(4) Data Transfer to Third CountriesData transfer to the USA cannot be excluded.

(5) Storage DurationThe data we send and link to cookies is automatically deleted after 14 months. Deletion of data whose retention period has expired is performed automatically once a month. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by: a. not providing consent to set the cookie or b. downloading and installing the browser add-on to disable Google Analytics HERE. You can also prevent the storage of cookies by adjusting your browser settings accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be limited.

(6) Legal Basis and Revocation OptionThe legal basis for this data processing is your consent, Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. For more information about Google Analytics terms and Google’s privacy policy, visit https://marketingplatform.google.com/about/analytics/terms/en/ and https://policies.google.com/?hl=en.Objection to Data CollectionYou can prevent wiredminds from collecting your data by clicking on the following link. An opt-out cookie will be set, which prevents data collection during future visits to this website: Exclude from Tracking For more information on the handling of user data at wiredminds, see the privacy policy of wiredminds GmbH: https://www.wiredminds.de/datenschutzhinweis/.Data Processing AgreementWe have concluded a data processing agreement with wiredminds GmbH and fully comply with the strict requirements of the German data protection authorities in using wiredminds.

D. Newsletter

(1) With your consent, you can subscribe to our newsletter, through which we inform you about our latest interesting offers. The advertised products and services are specified in the consent statement. (2) For subscribing to our newsletter, we use the so-called double opt-in procedure. This means that after registering, we will send you an email to the provided email address, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, clarify any misuse of your personal data. (3) The only mandatory information for receiving the newsletter is your email address. Providing additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Article 6(1) Sentence 1 lit. a GDPR. (4) You can revoke your consent to receive the newsletter at any time and unsubscribe. You can revoke your consent by clicking on the link provided in each newsletter email or by sending a message to the contact details provided above. (5) We would like to point out that we evaluate your user behavior when sending the newsletter. To do this, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluation, we link the data mentioned in Section 3 and the web beacons with your email address and an individual ID. Links included in the newsletter also contain this ID. With this data, we create a user profile to tailor the newsletter to your individual interests. We track when you read our newsletters, which links you click in them, and infer your personal interests from this. We also link this data with actions you take on our website. You can object to this tracking at any time by clicking the separate link provided in each email or by informing us through another contact method. The information is stored as long as you are subscribed to the newsletter. After unsubscribing, the data is stored purely for statistical and anonymous purposes. Such tracking is also not possible if you have disabled image display in your email program by default. In this case, the newsletter will not be fully displayed, and you may not be able to use all the features. If you manually display the images, the tracking described above will occur.

E. Social Plug-ins

(1) Our websites use social plug-ins, e.g., from Facebook, YouTube, Twitter, XING, Instagram, or LinkedIn. This results in buttons from the respective providers being displayed, or content from the respective provider being embedded on the website. When you visit a page that uses such a social plug-in, your browser establishes a connection with the respective provider. The content of the social plug-in is transmitted from the provider to your browser and embedded into the respective webpage. As a result of this process, the respective provider receives the following data, in particular:

• Information that your browser has visited the respective webpage;

• The IP address of the device used, even if you do not have an account with the provider.

(2) If you are logged in to the respective provider at the same time, the provider may link the visit to your personal profile. If you interact with a social plug-in — for example, by leaving a comment — the corresponding information will be transmitted from your browser to the provider and stored there. It may also be published on your profile with the provider and shown to your contacts.

F. Use of Online Services with Registration (User Account)

(1) In addition to purely informational use of our website, we offer various services for which registration and the creation of a corresponding user account are required. To create the user account, certain personal data must be provided, particularly your email address and username, as well as, if applicable, other personal details (e.g., name and address). The mandatory data fields are only those data that are necessary for the provision of our services or for any contractual relationship with you. Furthermore, in connection with the creation of the user account or the provision of services, we may collect additional personal data (e.g., IP address), if this is necessary for the provision of the services, including fraud prevention, or if we are legally obligated to do so. (2) The legal basis for processing is Article 6 (1) sentence 1 lit. b and lit. f of the GDPR. (3) You can delete your user account at any time. In this case, we will delete the data related to the user account or the provision of services, unless the data is required for other purposes (e.g., legal retention obligations) or we are legally obliged to store it, or we will restrict the processing accordingly. Otherwise, we will delete the data or restrict the processing as soon as the storage is no longer required for the aforementioned purposes. (4) You can object to the processing of data based on Article 6 (1) sentence 1 lit. f of the GDPR (“legitimate interests”) at any time, for reasons arising from your particular situation. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

G. Learning Management System (LMS)

(1) When subscribing to our Learning Management Platform, where you can find learning content required for product usage, training for mandatory certifications, and registration for available in-person training sessions, you will be asked to consent to the use of your personal data in a separate registration process. (2) We use a separate registration process to ensure that certificates, graduation levels, prerequisites for advanced content, and planned offers are made available only to specific participants. This means that after successful registration, all certificates and learning progress will be recorded for each individual participant. We also store your IP addresses and the time of your registration and confirmation. The purpose of this process is to verify and validate your registration and to detect any potential misuse of your personal data. (3) The mandatory information required for sending the assigned content and planned in-person training is your email address. To complete the billing process for paid content, the delivery address and employer's name are required. Providing additional, specifically marked data is voluntary and is used to address you personally. After your confirmation, we store your email address and shipping information to send personalized content and bookings from the Learning Management System. The legal basis is Article 6 (1) of the GDPR. (4) You can withdraw your consent at any time and unsubscribe from the platform. To withdraw your consent, click on the email address in the HELP section of the platform. The administrator will trigger a ticket to the responsible IT department to clear all associated data (including learning progress, past events, acquired certificates, feedback, and all personal data provided during account creation). Upon completion, a final email will be sent to confirm the deletion of the data.

H. Privacy Notices for Webinars

To conduct webinars over the Internet, dormakaba uses the software solutions GoToWebinar, GoToTraining, and GoToMeeting from LogMeIn, Inc., 333 Summer Street, Boston, MA 02210 USA. For the provision of this service and the associated data processing, LogMeIn, Inc. is the data controller. You can find LogMeIn's privacy policy here. For the conduct of the webinar, we will transmit your registration or customer data to LogMeIn, Inc. The processing of your data is based on your consent (Article 6 (1) a of the GDPR). For the conduct of the webinar, an encrypted connection is established between you and the webinar organizer. Webinars are regularly recorded to make them available on dormakaba’s websites for later access. Questions asked by participants during the seminar and corresponding answers will also be recorded and may be included in the webinar when accessed later. During and after the webinar, statistical data will be collected. By participating in a webinar, we will additionally receive information about your duration of participation, interest in the webinar, questions asked, or answers given for the purpose of further customer support or improving the user experience.