DOC: LEGAL-PRIVACY-2025-V2 // COMPLIANCE: GDPR & CCPA
GDPR COMPLIANT CCPA READY ISO 27001:2022

Privacy Policy & Data Stewardship.

This policy explains how we collect, use, and protect your personal information when you interact with our laboratory engineering platform. Our commitment is transparency, security, and complete user control.

Data Encryption
AES-256
At Rest & In Transit
Breach Response
72 Hours
Regulatory Notification
User Control
Full Rights
View / Edit / Delete
DATA PROTECTION OVERVIEW
POLICY ID: PP-2025-01
Secure data center server racks with blue lighting
INFRASTRUCTURE: SOC 2 TYPE II CERTIFIED
Data Residency: EU / US Regions
Retention Period: 24 Months Max
Automated Processing: Opt-Out Available
§1

Introduction

Siemens Road Engineering ("we", "our", or "us") operates the laboratory furniture and engineering systems platform accessible at siemensroad.com. This Privacy Policy describes how we handle personal information collected through our website, including all subdomains and related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Platform immediately. We reserve the right to modify this policy at any time, and such modifications will become effective upon posting the revised version on this page.

Policy Scope

This policy applies exclusively to data collected through our digital platforms. Information collected offline (e.g., during physical site visits, trade shows, or direct engineering consultations) is governed by separate contractual agreements and confidentiality provisions.

§2

Data Collection Scope

Person filling out a digital form on a laptop

Form Submissions

When you complete any form on our Platform (including RFQ requests, technical bid submissions, or newsletter signups), we collect the following categories of personal data:

Identity Data
Full Name, Job Title
Contact Data
Business Email, Phone
Professional Data
Institution, Facility Type
Technical Data
Floor Plans, BOQ Documents

Cookies & Tracking Technologies

Our Platform uses cookies and similar tracking technologies to enhance functionality and analyze usage patterns. We deploy the following categories:

Cookie Type Purpose Duration
Essential Session management, security tokens, load balancing Session / 24h
Analytics Anonymous usage statistics, page performance metrics 13 months
Preference Remembering language, region, and UI preferences 6 months

Analytics Tools

We utilize privacy-focused analytics platforms to understand aggregate user behavior. These tools may collect your IP address (anonymized), browser type, device category, referring URLs, and interaction patterns. We do not use cross-site tracking or advertising cookies without explicit consent.

§3

Purpose of Data Use

Data analytics dashboard with charts and graphs

We process your personal data exclusively for the following legitimate business purposes:

01
Service Delivery & Engineering Response

Processing RFQ submissions, generating technical quotations, and delivering engineering drawings or specifications you request.

02
Communication & Client Support

Responding to inquiries, providing project updates, and offering technical support related to your laboratory projects.

03
Platform Improvement & Analytics

Analyzing aggregated usage patterns to enhance user experience, optimize content relevance, and improve technical documentation.

04
Legal Compliance & Security

Fulfilling regulatory obligations, preventing fraud or abuse, and maintaining the integrity and security of our systems.

We do not sell your personal data to third parties, and we do not use your data for automated decision-making that produces legal or similarly significant effects without your explicit consent.

§4

Your Rights

Person signing a legal document with a pen

Under GDPR and CCPA, you retain comprehensive control over your personal information. You may exercise any of the following rights at any time:

Right to Access

Request a copy of the personal data we hold about you, including the purposes of processing and any third parties with whom we share it.

Right to Rectification

Request correction of inaccurate or incomplete personal data we maintain about you, ensuring our records are always current.

Right to Erasure

Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.

Right to Restrict Processing

Request limitation of processing in certain circumstances, such as when you contest the accuracy of your data or object to our legitimate interests.

Right to Data Portability

Receive your personal data in a structured, machine-readable format and transmit it to another controller without hindrance.

Right to Object

Object to processing based on legitimate interests, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds.

How to exercise your rights: Submit a request via email to privacy@siemensroad.com or through the contact form in Section 6. We will respond within 30 calendar days of receiving your verified request. No fee applies unless requests are manifestly unfounded or excessive.

§5

Data Security Measures

Cybersecurity concept with padlock and digital network

We employ a defense-in-depth approach to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Encryption

All data transmitted between your browser and our servers is encrypted using TLS 1.3. Stored data is encrypted at rest using AES-256.

Access Control

Strict role-based access controls (RBAC) with multi-factor authentication (MFA) for all internal personnel. Principle of least privilege enforced.

Personnel Training

All employees undergo mandatory annual security awareness training covering phishing, social engineering, and data handling best practices.

Incident Response

Documented incident response plan with 24/7 monitoring. Breach notification to regulators within 72 hours as required by GDPR.

§6

Contact Information & Policy Updates

Business team meeting in a modern office

Data Protection Officer

Siemens Road Engineering GmbH

Attn: Data Protection Officer
Industriestraße 24
68169 Mannheim, Germany

privacy@siemensroad.com
+49 621 98765 430

Policy Version Control

Version 2.0 -- Current
Effective: January 22, 2025
ACTIVE
Version 1.2
Effective: July 15, 2024 -- January 21, 2025
ARCHIVED
Version 1.0
Effective: March 01, 2024 -- July 14, 2024
ARCHIVED

We will notify you of material changes to this policy via prominent notice on our Platform or direct email communication at least 14 days before the changes take effect.

// EXERCISE YOUR DATA RIGHTS

Submit a Data Subject Request

Need to access, modify, or delete your personal data? Our dedicated privacy team will process your verified request within 30 days. All requests are handled confidentially.