Information on the processing of personal data for the use of
the Baumer Sensor Suite
The controller hereby informs the data subject about the processing of personal data in accordance with its
obligations under Art. 13 GDPR.
1. General information
1.1 Contact details of the controller and, where applicable, the data protection officer
(Art. 13 para. 1 a), b) GDPR)
The controller pursuant to Art. 4 No. 7 GDPR for the processing of personal data is:
Baumer Electric AG
Managing Director: Gerold Eger
Hummelstrasse 17
CH - 8500 Frauenfeld
info@baumer.com
The controller is not legally obliged to designate a data protection officer.
1.2 Purpose and legal basis of the processing of personal data
(Art. 13 para. 1 c) GDPR)
The Baumer Sensor Suite (BSS) is an application that enables parameterisation, testing and
visualisation of measured values of IO-Link sensors independently of the manufacturer. In order to
download, install and use the software, you have to register in advance. When registering and using
the Baumer Sensor Suite (BBS), the following data, inter alia, are processed:
 name, first name
 e-mail address
 position (optional)
 company
 address / Postal code, City (optional)
 phone number (optional)
 Country
The personal data are processed for the purposes of contact, marketing and sales in order that the
controller can present (further) offers to you. In addition, the use of the software requires the user to
be identifiable. Requesting access data is a common means of ensuring that only authorised
persons have access to the software and any updates.
The admissibility of this processing is based on Art. 6 para. 1 a), b), f) GDPR (consent, contract, legitimate
interest).
1.3 Recipients or categories of recipients of the personal data
(Art. 13 para. 1 e) GDPR)
Recipients of the data may be:
 departments and internal offices involved in the execution of the respective business processes
(e.g. marketing, sales)
 group companies of the Baumer Group
 shipping service providers (for shipping products, letters)
 suppliers (e.g. for warranty claims)
 processors (e.g. IT service provider, software manufacturer)
 public bodies (e.g. tax authority)
 advertising agencies
1.4 Transfer to a third country
(Art. 13 para. 1 f) GDPR)
The controller will not intentionally disclose your personal data to third parties that are not processors
or sub-processors. However, please note that when using the service based on certain sub-
processors in third countries without an adequate level of data protection, there are risks in relation
to your personal data that cannot be reduced even by high technical and organisational measures,
as the same level of fundamental rights as in Switzerland and the EU may not be complied with in
such countries.
2. Information according to Art. 13 para. 2 GDPR
2.1 Period or criteria for the period of storage (Art. 13 para. 2 a) GDPR)
The first storage (start of the storage period) of the data takes place when the data subject’s
personal data are provided for the first time. The personal data shall be deleted after the expiry of the
statutory retention obligations unless the controller has a legitimate interest in further storage. In any
case, only those data will continue to be stored that are absolutely necessary to achieve the
corresponding purpose. If the consent is withdrawn, the personal data will be deleted without undue
delay unless the controller is otherwise obliged or entitled to retain such data.
2.2 Data subject rights
The data subject has the following rights:
Right of access (Art. 15 GDPR)
The controller shall provide the data subject, upon request, with information as to whether the
controller is processing data concerning him or her. The controller shall endeavour to process
requests for information promptly.
Right to rectification of inaccurate data (Art. 16 GDPR)
The data subject shall have the right to obtain from the controller without undue delay the
rectification of inaccurate personal data concerning him or her.
Right to erasure (Art. 17 GDPR)
The data subject shall have the right to obtain from the controller the erasure of personal data
concerning him or her without undue delay and the controller shall have the obligation to erase
personal data without undue delay where one of the grounds specified in Art. 17 para. 1 a) to f)
GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
The data subject shall have the right to obtain from the controller restriction of processing where one
of the conditions in Art. 18 para. 1 a) to d) GDPR applies.
Right to data portability (Art. 20 GDPR)
The data subject shall have the right to receive the personal data concerning him or her, which he or
she has provided to the controller, in a structured, commonly used and machine-readable format and
have the right to transmit those data to another controller without hindrance from the controller to
which the personal data have been provided, where the processing is based on consent pursuant to
Art. 6 para. 1 a) GDPR, Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR
and the processing is carried out by automated means.
Right to object to unreasonable data processing (Art. 21 GDPR)
The data subject shall have the right to object, on grounds relating to his or her particular situation, at
any time to processing of personal data concerning him or her which is based on Art. 6 para. 1 e) or
f) GDPR, including profiling based on those provisions. The controller shall no longer process the
personal data unless the controller demonstrates compelling legitimate grounds for the processing
which override the interests, rights and freedoms of the data subject or for the establishment,
exercise or defence of legal claims.