As the publisher of this site, Jungheinrich Service & Parts AG & Co. KG knows how important it is to you that your personal data is handled confidentially. We would, therefore, like to assure you that we comply with all the statutory requirements for data privacy and data security. In the following, we will provide you with detailed information on the nature, scope and purpose for which personal data is used within our online offering and the websites associated therewith.

This data protection declaration supplements the respective provisions of the General Terms and Conditions.

Controller in the sense of privacy law is Jungheinrich Service & Parts AG & Co. KG, Friedrich-Ebert-Damm 129, 22047 Hamburg, Germany.

Please address all questions regarding the processing of your personal data as well as requests to exercise your rights to our Data Protection Officer:

(Group) Data Protection Officer

Friedrich-Ebert-Damm 129

22047 Hamburg

Germany

DPO@jungheinrich.com

Fundamentals of data processing

We process personal data only in compliance with the relevant data protection regulations. This means that the data will only be processed if legally permitted to do so, i.e. if the data processing is required by law, if the user has given his consent or if data processing is carried out on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f GDPR.

Accessing our website

When you access our website, the browser used for this on your end device automatically sends information to the server for our website/application, which is temporarily stored in a log file. We have no influence over this. The following information is also recorded without your input and is stored until it is automatically deleted:

• The IP address of the Internet-enabled device making the request
• The date and time of access
• The name and URL of the file accessed
• The website/application used to gain access (referrer URL)
• The browser you used and where applicable the operating system of your Internet-enabled computer and the name of your access provider.

The legal basis for processing the IP address is art. 6 para. 1 (f) of the GDPR. Our legitimate interest arises from the following purposes for data collection. Remember that the data collected does not give us any direct indication of your identity and we do not draw any conclusions in this regard. We use the IP address of your end device and the data listed above for the following purposes:

• To ensure that a smooth connection is established
• To ensure that our website provides a good, consistent user experience
• To assess system security and stability

We also use cookies and tracking tools for our website. The precise procedure and how your data is used for this purpose is explained in further detail in sections about cookies and embedding of services and third-party content.

Use of our service

Our service can be used to view contractual-, vehicle- and invoice data. In order to use our service and to enable the processing of such services, you must register as a user. The following personal data is processed as part of user registration and for the creation of service requests:

• User access data;
• Company name and address;
• First and last name of the user;
• Telephone number, e-mail and customer number;
• Language setting of the device used.

We process and use the personal data collected from you exclusively for the fulfilment of your order request. Data processing for the above-mentioned purposes is carried out in order to perform the contract on the use of the product (cf. Art. 6(1) sentence 1 lit. b) GDPR).

Getting in touch

When you get in touch with us (via a contact form or via email), the user details provided are used to process the request. The user details may be stored in our Customer Relationship Management systems ("CRM system") or comparable request set-up to enable us to provide a tailored service. We use the CRM system to process user data only in accordance with our privacy policy and to comply with EU data privacy.

General Information

When providing the product we use so-called cookies. These are small text files that are sent from the product to the device that you use (PC, tablet etc.) and stored in the memory of your browser. The purpose of these cookies is, for example, to identify a user as an authorised user for the duration of his use of the product. Without this temporary "intermediate storage", entries already made in some applications would have to be made over and over again. A cookie contains only the data that a server issues and/ or that the user enters on request (e.g. structure, domain information, path, expiry date, cookie name and value). A cookie cannot spy out a hard disk.

In detail, the cookies mentioned in the following overview are set when using the product. These are, on the one hand, so-called first-party cookies, which we ourselves use, and, on the other hand, third party cookies which are set by third parties to achieve certain purposes. If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Cookies that have already been saved can be deleted in the browser's system settings. However, please note that deactivating cookies may restrict the use of the product.

To give you an overview of the cookies in use and to facilitate your consent or non-consent to the usage of cookies, we are using the tool ‚Cookie Bot‘. At the beginning of your visit to our website, this tool will ask your consent.

Please visit https://parts.jungheinrich.de/en/p/cookies for an overview of cookies in use.

Google Analytics

For the needs-oriented design and ongoing optimisation of our web pages, on the basis of art. 6 para. 1 (f) of the GDPR (legitimate interest) we use Google Analytics, a web analytics service provided by Google Inc. ("Google"). In addition the website uses the extension Google Optimize. Anonymous usage profiles are created and cookies are used in connection with this. The information generated by the cookie about your use of this website, such as

• Browser type/version
• Operating system used
• Referrer URL (the page visited prior)
• Host name of the accessing computer (IP address)
• Time of the server request

is sent to a Google server in the USA and stored there. Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data privacy law.

We use Google Analytics only with IP anonymisation activated. This means that the user's IP address is truncated by Google within the Member States of the European Union and other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the USA and shortened there.

The user can apply the corresponding setting in the browser software to block the storage of cookies. However, we should point out that it may not be possible to use all the functions of this website as a result. The user can also prevent the collection of data generated by the cookie regarding use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under this link:  http://tools.google.com/dlpage/gaoptout?hl=en

An alternative to the browser plugin, or within browsers on mobile devices, it is possible to set an opt-out cookie that prevents future data collection by Google Analytics within this website.

Google ReCaptcha

On the basis of art. 6 para. 1 (f) of the GDPR (legitimate interest), we use the reCAPTCHA service provided by Google Inc. (Google). This request is used to determine whether an entry has been made by a person or represents misuse through automated machine processing. The request includes sending to Google the IP address and where necessary other data required by Google for the reCAPTCHA service. For this purpose, your entry is transmitted to Google and undergoes further usage there. By using reCaptcha, you agree that your recognition can be used in the digitalisation of old works. However, by activating the IP anonymisation on this website, your IP address will be truncated by Google within the Member States of the European Union and other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on the behalf of the operator of this website to evaluate the usage of this service. The IP address transmitted by your browser within the scope of reCaptcha will not be united with any other data held by Google. The diverging data privacy regulations of Google apply to this data.

Additional information on the Google data privacy regulations can be found at: https://www.google.com/intl/de/policies/privacy/.

Google Tag Manager

On the basis of our legitimate interest (i.e. interest in analysis, optimisation and economical running of our online offering as defined in art. 6 para. 1 (f) of the GDPR), this website uses Google Tag Manager. This service enables the management of website tags via an interface. Google Tag Manager simply implements tags. No cookies are placed, and no personal data is captured. Google Tag Manager triggers other tags that may capture data. Google Tag Manager does not access this data. If deactivated at domain or cookie level, deactivation applies for all tracking tags, insofar as they are implemented using the Google Tag Manager. More information on Google Tag Manager can be found at the following link: http://www.google.de/tagmanager/use-policy.html

The Google Tag Manager is not actively tracking users on its own. However, when our website is accessed and the Google Tag Gateway feature is not used, your device will download a JavaScript file called gtm.js from Google servers, which may be located in the USA, and store it locally. As with all transmission processes on the Internet, in this case too, the IP address of the user's device is inevitably transmitted together with metadata such as the browser version used, unless you have changed this in your local settings and plugins. Against this background, strictly speaking, the Google Tag Manager service stores data on your device and can be used to read data as defined by the Google Tag Manager configuration.

The user is able to prevent Google Tag Manager from sending any tags. To do this, the user must click on the following opt-out link to file the Google Tag Manager deactivation cookie in his browser.

YouTube

On the basis of our legitimate interests (i.e. interest in analysis, optimisation and economical running of our online offering as defined in art. 6 para. 1 (f) of the GDPR), functions of the YouTube service are embedded into the Jungheinrich Service & Parts AG & Co. KG website in order to display and play back videos. These functions are provided by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA. You can find further information in the YouTube data privacy regulations.

Here, an advanced data privacy mode is used whereby, according to information from the provider, user information is stored only when video playback is initiated. If you start to play back an embedded YouTube video, YouTube uses cookies to gather information on user behaviour. According to information provided by YouTube, this is used, among other things, to create video statistics, to improve user friendliness and to prevent misuse. Regardless of whether the embedded video is played back or not, every time the Jungheinrich AG website is accessed a connection to the Google "DoubleClick" network is established, which can trigger further data processing beyond the influence of Jungheinrich AG.

Users can find further details on how YouTube uses cookies in the YouTube data privacy declaration at: http://www.youtube.com/t/privacy_at_youtube.

Jungheinrich Chat

You can rest assured that your personal data is secure. We want to offer you an easy way to contact us through our Cognigy chat function. Please note the following information regarding the processing of your data: It is not necessary to enter personal data to use the help of Jungheinrich's digital assistant. We recommend that you do not share such data.

By using the "Digital Assistant," you agree to this privacy policy. The processing of your personal data within the chat function is based on your consent (Article 6 (1) (a) GDPR). All data collected during the chat will be deleted after 30 days at the latest.

Your data will be transmitted to the service provider Cognigy, which provides the chat function. Cognigy is contractually obligated to protect your data in accordance with applicable data protection laws, and data processing by Cognigy takes place exclusively within the European Union. Address: Cognigy GmbH, Speditionstraße 1, 40221 Düsseldorf, Germany.

If you wish to contact our customer service, you will be redirected to a human colleague or the contact form within the digital assistant.

You can revoke your consent to use the chat at any time. All personal data stored during the chat will then be deleted.

We cooperate with third parties who take over certain technical tasks in the provision of the product on our behalf.

As far as we involve external service providers, it always happens in accordance with the legal provisions and the regulations of the current privacy policy. Recipients of the data are obliged to use them only for the defined purposes. In the event of data being transferred to a recipient outside the Jungheinrich Group in a third country outside the European Union/EEA, the recipient guarantees an equivalent level of data protection in accordance with Art. 44 ff. GDPR. Exceptions are states whose data protection level has been recognized as appropriate by the EU Commission pursuant to Art. 45 GDPR.

Our service provider Microsoft carries out the access control and login. Only the data required for this purpose (e.g. access data) is transmitted to the service provider.

Microsoft Enterprise Service

Microsoft Corporation

One Microsoft Way

Redmond

Washington 98052, USA

Data privacy representative for the European Economic Area and Switzerland:

Microsoft Ireland Operations, Ltd.

One Microsoft Place

South County Business Park

Leopardstown

Dublin 18, D18 P521, Irland

Overview

As well as the right to withdraw consent, you also – if so provided by statutory requirements – have the following additional rights:

- Right to be informed of the personal data we have stored about you in accordance with art. 15 of the GDPR

- Right to correction of incorrect or incomplete data in accordance with art. 16 of the GDPR

- Right to have the data about you stored by us deleted in accordance with art. 17 of the GDPR, unless legal or contractual retention periods or other statutory obligations/rights to further storage need to be met

- Right to restrict the processing of your data in accordance with art. 18 of the GDPR

- Right to data transferability in accordance with art. 20 of the GDPR

- Right to complain to the Information Commissioners Office. You can apply to the supervisory body for your usual place of residence or place of work or for our company headquarters. 

Objection and revocation

According to the EU Data Protection Act you have a right to

- information free of charge about your stored data as well as to have this data corrected, blocked or deleted,

- object or revoke use of the data at any time for advertising purposes.

You have the right to withdraw your consent to data processing at any time, informally and without giving reasons. The withdrawal does not affect the legality of the processing carried out up to that point.

Please direct all inquiries regarding the assertion of your rights to our Data Protection Officer under the contact options indicated above.

We implement technical and organisational security measures in accordance with the state of the art to ensure that the requirements of European and national privacy law are observed and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.

In particular, all communication in connection with the visit and use of the product, which takes place via the browser, is encrypted using the TLS procedure.

In principle, we only store your data for as long as is necessary for the purpose for which the data were collected. A longer storage takes place if legal retention periods apply or you have declared your consent to the storage for a longer period of time.

The obligation of Jungheinrich to retain a copy of the data for legally prescribed archiving purposes or other purposes provided by the underlying contract remains unaffected.

User accesses are retained until a deletion is initiated by the user. The deletion of the user access can be performed by addressing your request to your customer contact or the Data Protection Officer (see section 2. of this Policy). After final termination of the contract for the use of the product or deletion of the user profile, we will initially restrict access to the registration data and delete them as soon as they are no longer required for asserting, exercising or defending legal claims.

The links contained in our service may refer to other Jungheinrich AG websites. The Privacy Policy provided for this purpose and shown on the corresponding web pages apply expressly. The same applies to possible links to websites of third parties.

We will update this Privacy Policy if necessary for legal or factual reasons. Please keep yourself regularly informed about the current status of the Privacy Policy.

May 2020