Legal

Privacy Policy

Information on the processing of personal data pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR) when using this website.

1. Controller

Controller within the meaning of the GDPR:
SHR GmbH
Bahnhofstr. 106-134
74348 Lauffen am Neckar
Germany

Contact for data protection inquiries: info@shr-robotics.eu

2. Visiting this website (server log files)

When you access our website, the browser on your device automatically sends information to our web server. This information is temporarily stored in a so-called log file. The following data is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting device (anonymized)
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which access is made (referrer URL)
  • Browser used and, where applicable, the operating system of your device

IP addresses in the web server log file are deleted or shortened (anonymized) without delay to protect your privacy. Security-relevant accesses are additionally logged by the website firewall (see Section 8). We process this data to ensure a smooth connection, to allow convenient use of the website and to evaluate system security and stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest follows from the purposes listed above. We do not use this data to draw conclusions about you as a person.

3. Contact form

If you contact us via the contact form, we process the data you provide (name, email address, company, subject, message) in order to handle your inquiry and any follow-up questions. Mandatory fields are marked with an asterisk.

The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to the performance of a contract or to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries addressed to us) and your consent pursuant to Art. 6(1)(a) GDPR given via the checkbox. You can withdraw your consent at any time with effect for the future. Your data will be deleted once your inquiry has been fully dealt with, unless statutory retention obligations require longer storage.

Providing the mandatory information is neither legally nor contractually required; without it, however, we cannot process your inquiry. The data you submit is additionally stored in the database of our website (form entries). Notifications about your inquiry and our replies are sent by email via Microsoft 365 / Exchange Online of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland); a data processing agreement is in place with Microsoft. For troubleshooting, the website keeps a log of sent emails (sender, recipient, subject, content, time), which is automatically deleted after 14 days. Please note that communication by email may have security gaps; complete protection of data against access by third parties is not possible.

4. Newsletter

You can subscribe to our newsletter on this website. For this purpose we process your email address and, as mandatory information, your first and last name, so that we can address you personally.

We use the double opt-in procedure: after you register, you receive an email asking you to confirm your subscription. Your subscription only becomes active once you have confirmed it. We store the time of registration and confirmation in order to be able to prove your consent.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link contained in every newsletter or by sending an email to info@shr-robotics.eu. After you unsubscribe, your data will be deleted from the mailing list; we may retain your email address in a block list to the extent necessary to prove that consent was previously given and to ensure that you do not receive any further newsletters (Art. 6(1)(f) GDPR).

Newsletter subscriber data is managed in our own content management system (FluentCRM) on our web server. Emails are sent via Microsoft 365 / Exchange Online (see Section 3), which acts as a processor on our behalf. The data is not passed on to any other external newsletter service providers.

5. Job applications

Our job postings are links to an external applicant portal operated by Ashby (jobs.ashbyhq.com). No personal data is transmitted to Ashby by this website. When you click on such a link, you leave our website. Information on the processing of your data in the application process is provided in the applicant portal.

If you send us an application by email, we process the data contained therein to carry out the application process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship) and, where applicable, your consent pursuant to Art. 6(1)(a) GDPR. Where necessary for the application process, your data may be forwarded to SCHUNK SE & Co. KG. Application documents are deleted after the application process has ended, taking into account applicable statutory periods, unless you have consented to longer storage.

6. Cookies and consent management

We use cookies that are technically necessary to operate this website and – only with your consent – cookies for statistical analysis with Matomo (see Section 7). Cookies are small text files that your browser creates automatically and stores on your device. They do not cause any damage to your device and do not contain viruses, trojans or other malware.

We use a consent management tool to obtain and document your consent where required. It stores your cookie preferences in a cookie on your device. The legal basis is Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(c) and (f) GDPR.

Most browsers accept cookies automatically. You can configure your browser so that no cookies are stored on your device or so that a notice always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all functions of our website.

The following cookies or comparable storage technologies are used on this website:

  • pll_language – stores the language version you selected (German/English); duration: 1 year; technically necessary (language management Polylang).
  • cmplz_* (e.g. cmplz_banner-status, cmplz_consented_services, cmplz_policy_id) – store your cookie preferences and your choice in the consent banner; duration: up to 365 days; technically necessary (consent management Complianz).
  • wordpress_*, wp-settings-* – only for logged-in editors, not for visitors of the website; duration: end of session up to 14 days; technically necessary.
  • _pk_id.* – stores a randomly generated visitor ID to recognise returning visits for statistical purposes; duration: 13 months; only with consent (statistics, Matomo).
  • _pk_ses.* – temporarily stores data about the current visit; duration: 30 minutes; only with consent (statistics, Matomo).
  • _pk_ref.* – stores the website from which you reached us; duration: 6 months; only with consent (statistics, Matomo).

You can withdraw your consent at any time with effect for the future by reopening and changing your cookie settings or by deleting the cookies in your browser.

7. Analytics and tracking (Matomo)

We use the open-source web analytics software Matomo on this website to evaluate the use of our website statistically and to improve our offering. Matomo is operated exclusively on our own web server (self-hosted). The collected data is not transferred to the Matomo vendor or any other third parties.

Matomo is only loaded and only sets cookies (see Section 6) if you consent to the “Statistics” category in the consent banner. In particular, the following data is processed: shortened IP address (the last two bytes are removed, e.g. 192.168.xxx.xxx), pages visited and time spent, date and time of access, referrer URL, external links and downloads clicked, browser type and version, operating system, device type, screen resolution, language setting and the country derived from the shortened IP address. We do not link this data to your person.

The legal basis is your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by opening your cookie settings and deactivating the “Statistics” category. The lawfulness of processing carried out before the withdrawal remains unaffected.

The raw data is deleted as soon as it is no longer required for statistical analysis. Aggregated statistics do not contain any personal data.

Apart from this, we do not use any third-party analytics, tracking or advertising services (e.g. Google Analytics, Google Tag Manager, Meta Pixel).

8. Hosting and data security

All data is stored on servers within the European Union. When you visit our website, we use TLS encryption in conjunction with the highest level of encryption supported by your browser. You can recognize an encrypted connection by the lock symbol in your browser’s address bar.

To protect the website against attacks and misuse, security measures (e.g. a firewall) process technical access data such as IP addresses. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure operation of our website. In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

To protect the website we use the security plugin Wordfence. It logs security-relevant accesses and login attempts (IP address, time, requested URL) on our server and may transmit information about blocked accesses to the manufacturer (Defiant, Inc., USA) to defend against attacks. Access to the administration area is protected by two-factor authentication. Backups of the website, including the database, are created regularly; personal data contained therein (e.g. form entries) is overwritten or deleted according to a fixed rotation scheme. The legal basis in each case is Art. 6(1)(f) GDPR.

9. Recipients of data

We only pass on personal data to third parties where this is necessary for the purposes described above. Recipients may include: our hosting provider acting on our behalf and bound by our instructions pursuant to Art. 28 GDPR; Microsoft Ireland Operations Limited (sending and receiving email via Microsoft 365, also as a processor); SCHUNK SE & Co. KG in connection with applications; and public authorities where we are legally obliged to do so.

10. Transfers to third countries and external links

Where data may be transferred to service providers based in, or with a parent company in, third countries (in particular the USA) – for example in connection with Microsoft or Wordfence – we rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, or on EU standard contractual clauses (Art. 44 et seq. GDPR).

Our website contains links to external websites (e.g. SCHUNK, the Ashby applicant portal). By clicking on them you leave our website; the respective operator is responsible for data processing there.

We do not embed external fonts (e.g. Google Fonts), map or video services, social media plugins or tracking pixels. Fonts, images and videos are loaded from our own server.

11. Your rights

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg). You may also contact the supervisory authority of your usual place of residence or workplace.

12. Storage period

We only store personal data for as long as is necessary to fulfill the respective purpose or as required by statutory retention periods. Once these periods have expired, the corresponding data is routinely deleted in accordance with statutory provisions.

13. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Changes to this privacy policy

This privacy policy is currently valid and was last updated in November 2026. Due to the further development of our website and services or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current version at any time on this page.

This English version is provided for convenience. In case of any discrepancy, the German version shall prevail.

Contact

If you have any questions about the collection, processing or use of your personal data, or wish to request information, rectification, restriction or erasure of data or withdraw your consent, please contact:

SHR GmbH
Bahnhofstr. 106-134
74348 Lauffen am Neckar
Germany
Email: info@shr-robotics.eu