Privacy Policy

Person responsible within the meaning of the GDPR:

PI (Physik Instrumente) Ltd. UK
Trent House, University Way,
Cranfield Technology Park,
Cranfield, Bedford MK43 0AN, United Kingdom
Phone: +44 1234 756 360
Email: uk@pi.ws
Website: www.physikinstrumente.co.uk

Contact information for PI’s Data Protection Officer:

Dr. Alexander Deicke 

K11 Consulting GmbH  
Kaffeeberg 11 
71634 Ludwigsburg, Germany  
Phone: +49 7141 9475321  
E-Mail: datenschutzbeauftragter@k11consulting.de 
Website: k11-consulting.com 

Each time the website is accessed, only certain information is automatically collected and stored in so-called server log files, which are transmitted to the PI web server. This includes the type and version of the browser used, the operating system used, the referrer URL, the subpages visited, the date and time of access, the IP address, the Internet service provider, and similar technical data. This data is processed separately from other data. It is not possible to associate this data with a certain person.

This data is used by PI to maintain the functionality of the website, detect and resolve technical issues, and prevent or, if necessary, prosecute cases of misuse. In addition, the anonymized data is used for statistical analysis and to improve the website.

The legal basis for this data processing is Art. 6(1)(f) GDPR, based on PI’s legitimate interest in ensuring the smooth operation and security of the company’s internal IT systems. The collected data will be deleted after seven days at the latest, unless retention is required for evidentiary purposes. In such cases, it is stored until the respective incident has been fully resolved.

When contacting PI via a form on the Website or by email, the personal data provided (name, email address, company, and content of the message) is collected and processed. This data is processed, stored, and used to respond to the respective inquiry, to establish contact with the person making the inquiry, and for related technical processing and administrative purposes.  

The legal basis for processing this data is Art. 6(1)(b) GDPR (for contract-related contact) or Art. 6(1)(f) GDPR (in all other cases), depending on the nature of the respective contact. 

The personal data entered in the contact form is processed not only to handle the respective inquiry, but also for internal analysis and improvement of PI’s services. In particular, this includes: 

• The evaluation of frequently asked questions 

• The identification of recurring inquiries 

• The statistical analysis of inquiries 

The legal basis for this processing is PI’s legitimate interest under Art. 6(1)(f) GDPR, as it contributes to the continuous improvement of the services offered by PI. 

Data received in the course of contacting PI will be deleted once it is no longer required for the purpose for which it was collected. This applies as soon as a request has been fully processed, and no further communication is necessary or desired by the person making the request. 

PI reserves the right to store network data for a limited time and solely for the purpose of identifying fraud or misuse, such as detecting hacker attacks. Such data will be stored for a maximum of 30 days, unless there is a justified reason to retain it for a longer period. 

Visitors to the Website have the option to subscribe to the PI newsletter via the company website. Visitors who register for the email newsletter will regularly receive the current product catalog and marketing information. For this purpose, personal data such as email addresses and, where applicable, names are collected. After a visitor submits their email address, a confirmation email is sent requesting confirmation of the registration. Only upon confirmation is the email address stored, and it remains stored until the respective person unsubscribes from the newsletter. 

Data is processed on the basis of the visitor’s consent in accordance with Art. 6(1)(a) GDPR. This consent can be revoked at any time with future effect. 

Unsubscribing from the newsletter is possible via the link “Unsubscribe from newsletter” included in the footer of every email sent or by emailing enews@pi.ws. Once unsubscribed, the personal data associated with the newsletter dispatch will be immediately deleted.

This website uses web analysis and tracking tools provided by third parties. Some of these third-party providers also process data in the USA. To the extent that personal data is transferred to recipients in third countries, in particular the USA, such transfers are made exclusively in compliance with the requirements of Art. 44 et seq. GDPR. In the absence of an adequacy decision, appropriate safeguards, in particular the European Commission’s standard contractual clauses, are used. To the extent that service providers are certified under the EU-U.S. Data Privacy Framework, the data transfer is carried out on the basis of the adequacy decision pursuant to Art. 45 GDPR.

As a basis for data processing with recipients located in third countries, so-called standard contractual clauses pursuant to Art. 46(2) and (3) GDPR are used by third-party providers working with PI. Standard contractual clauses (SCCs) are templates issued by the EU Commission and are intended to ensure that personal data continues to be protected according to European data protection standards, even when processed in third countries such as the USA. Under these clauses, third-party providers undertake to comply with the European level of data protection when processing personal data, even if this data is processed outside the EU. These clauses are based on the implementing decision of the EU Commission, which can be found at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?eliuri=eli%3Adec_impl%3A2021%3A914%3Aoj&locale=en.

The transfer of personal data in connection with the use of these services will only occur based on your explicit consent pursuant to Art. 49(1)(a) GDPR in conjunction with Art. 6(1)(a) GDPR.

This website uses Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that enables the integration of tracking and analytics tools as well as other technologies on websites. The tool does not create usage profiles, store cookies, or conduct independent analyses, but rather serves solely to manage and deploy the tools integrated through it. However, Google Tag Manager captures the IP addresses of visitors, which may consequently be transferred to Google’s parent company in the USA.

The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the efficient, secure, and centrally manageable integration and administration of the services used on the website. If such consent has been obtained, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the Telecommunications Digital Services Data Protection Act (TDDDG). The consent can be revoked at any time with future effect.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

This website uses functions of Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of visitors on the website. In doing so, the website operator receives various usage data (e.g., page views, length of stay, operating systems used, and the origin of visitors). This data is assigned to the respective end device. It is not assigned to a user ID.

In addition, Google Analytics can record mouse and scroll movements as well as clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected datasets and uses machine-learning technologies in its data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies and device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time with future effect.

The transfer of data to the USA is based on the EU standard contractual clauses. For further information, see https://business.safety.google/adscontrollerterms/sccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780. Data is transferred on the basis of the DPF certification; the SCCs have been agreed as an additional contractual safeguard.

IP Anonymization

Google Analytics IP anonymization is activated. Within the member states of the European Union or other states that are contracting parties of the Agreement on the European Economic Area, Google already truncates IP addresses, i.e., anonymizes them, before they are transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information to evaluate the use of the website by visitors, to compile reports on website activities, and to provide the website operator with further services connected with website and internet usage. The IP addresses transmitted by browsers in the context of Google Analytics will not be merged with other data from Google.

Browser Plugin

The collection and processing of data by Google can be prevented by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Data is stored for 14 months.

For further information on the handling of user data by Google Analytics, see Google’s Privacy Policy.

The Google Signals extension is used as part of Google Analytics. When a user visits the PI website, Google Analytics collects, among other things, the visitor’s location, search history, and YouTube history, as well as demographic data (visitor data). This data may be used for personalized advertising through Google Signals. If a visitor has a Google account, the visitor data from Google Signals is linked to the respective Google account and used for personalized advertising. The data is also used to generate anonymized statistics on the visitor’s usage behavior.

This website uses Microsoft Advertising, an online advertising program provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising enables the website operator to display ads in the Bing search engine or on third-party websites when users enter specific search terms into Bing (keyword targeting). Furthermore, targeted ads can be displayed based on user data held by Microsoft (e.g., location data and interests) (audience targeting). PI can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of ads and how many ads resulted in corresponding clicks.

The PI website uses Universal Event Tracking (UET) from Microsoft Advertising. This enables pseudonymous identifiers to be collected in order to track the actions visitors take on the website after clicking on an ad in Microsoft Advertising. UET collects IP addresses (anonymized), device identifiers, information about device and browser settings, the Microsoft Click ID (stored in cookies), the duration of the visit to the website, which sections of the website were accessed, which ad brought visitors to the website, and which keyword they clicked on.

The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time with future effect.

The transfer of data to the USA is based on the EU standard contractual clauses. For further information, see https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/6474.

This website uses Google Ads, an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables the website operator to display ads in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). PI can quantitatively evaluate this data by, for example, analyzing which search terms triggered the display of ads and how many ads resulted in corresponding clicks.

The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time with future effect.

The transfer of data to the USA is based on the EU standard contractual clauses. For further information, see https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

This website uses features of Google Ads Remarketing, a marketing tool provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing allows users who interact with PI’s online offerings to be assigned to specific target groups so that they can subsequently be shown interest-based ads on the Google Display Network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device features. In this way, interest-based, personalized advertising messages — tailored based on the visitor’s previous usage and browsing behavior on one device (e.g., cell phone) — can also be displayed on another device belonging to the same person (e.g., tablet or PC).

Visitors who have a Google Account can opt out of personalized advertising by clicking the following link: https://adssettings.google.com/anonymous?hl=en.

The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time with future effect.

For more information on Google Conversion Tracking, see Google's Privacy Policy at https://policies.google.com/technologies/ads?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

This website uses Google Conversion Tracking, an analytics tool provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking enables Google and PI to determine whether visitors have performed specific actions. For example, it is possible to analyze which buttons on the PI website are clicked and how often, as well as which products were viewed or purchased particularly frequently. This information is used to generate conversion statistics. In this way, PI learns how many people clicked on PI ads and what actions they took, but does not receive any personally identifiable information. Google itself uses cookies or similar recognition technologies for identification purposes.

The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time with future effect.

Further information on Google Conversion Tracking can be found in the Google Privacy Policy at https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

This website uses ClickDimensions, a web analytics service provided by ClickDimensions LLC., 5901 Peachtree Dunwoody Road, NE, Suite B500, Atlanta, GA 30328, USA.

If visitors to this website have consented to the use of marketing cookies, ClickDimensions links visitor data in an anonymized form with IP address lists of known companies. This linkage allows visitors to this website and their behavior on the site to be connected with specific companies.

The use of this service is based on the visitor's consent in accordance with Art. 6(1)(a) GDPR. The consent can be revoked at any time with future effect.

The transfer of data from this website to ClickDimensions can be prevented by only accepting technically necessary cookies in the cookie settings.

For further information, see the ClickDimensions Privacy Policy.

This website uses HubSpot, a web analytics service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.

If visitors to this website have consented to the use of marketing cookies, HubSpot automatically collects data using tracking technologies such as cookies and tracking pixels. These cookies or similar technologies (e.g., web beacons and JavaScript) are used to analyze trends, administer the website, track visitors’ navigation on the website, and gather aggregated demographic data about the visitors.

The use of this service is based on the visitor's consent in accordance with Art. 6(1)(a) GDPR. The consent can be revoked at any time with future effect.

The transfer of data from this website to HubSpot can be prevented by only accepting technically necessary cookies in the cookie settings.

For further information, see the HubSpot Privacy Policy.

This Website uses the form plugin Powermail, an extension of the TYPO3 content management system. Powermail enables the convenient provision of contact and inquiry forms. 

The collected personal data (e.g., name, email address, message content, and IP address) is only stored for as long as is required to process the respective inquiry. This data is deleted at regular intervals (approx. every month or two) in the TYPO3 system. The storage period in the CRM system may be longer if necessary for continued customer care or to comply with legal retention obligations. 

Personal data is processed in order to respond to inquiries and to optimize services. Depending on the form, the processing may be carried out on one of the following legal bases: 

• Fulfillment of a contract or pre-contractual measure in accordance with Art. 6(1)(b) GDPR 

• Legitimate interest in accordance with Art. 6(1)(f) GDPR

• Consent in accordance with Art. 6(1) (a) GDPR 

The data collected using Powermail is processed directly on the PI web server. In general, this data is not passed on to external third parties unless necessary to respond to an inquiry or if there is a corresponding legal obligation. However, it may be transferred to various in-house systems and be processed there in accordance with the respective country’s requirements. 

PI uses the reCAPTCHA service integrated in Powermail to protect forms from automated spam inquiries. The CAPTCHA logic of the TYPO3 Powermail extension is also used. reCAPTCHA is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

This website uses Google reCAPTCHA (hereinafter “reCAPTCHA”), a security service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to verify whether data entered on this website (e.g., in a contact form) is being entered by a human or by an automated program. To this end, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as a person visits the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, time spent on the website, and mouse movements). The data collected during the analysis is transmitted to Google.

The reCAPTCHA analyses are performed automatically in the background without any separate user interaction.

In this context, Google acts solely as a data processor within the meaning of Art. 28 GDPR and will not use the data collected in this manner for its own purposes. The use of the tool is based on a Data Processing Agreement (DPA) with Google.

The storage and analysis of the data are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated surveillance and from spam. The use of this service is based on the visitor’s consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Consent may be revoked or modified at any time, with effect for the future, via the cookie settings. The lawfulness of the processing carried out prior to revocation remains unaffected.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

This website uses the LinkedIn Insight Tag, a tracking tool provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The website operator uses the LinkedIn Insight Tag to collect information about visitors to the PI website. If a website visitor is registered with LinkedIn, the website operator can, among other things, analyze the visitors’ key professional data (e.g., career level, company size, country, location, industry, and job title) and, based on this, better tailor the website to specific target groups. Furthermore, the LinkedIn Insight Tag can be used to measure whether visitors make a purchase or take another action on the PI website (conversion tracking). Conversion tracking can also be performed across devices (e.g., from a PC to a tablet). The LinkedIn Insight Tag also offers a retargeting feature that allows targeted advertisements to be displayed to visitors outside the website; however, according to LinkedIn, the recipients of these advertisements are not identified.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are truncated or (if used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted from LinkedIn after seven days. The remaining pseudonymized data will be deleted within 180 days.

The website operator cannot link the data collected by LinkedIn to specific individuals. LinkedIn stores the personal data it collects from website visitors on its own servers in the USA and uses it for its own advertising purposes. For further information, see the LinkedIn Privacy Policy.

The use of the above-mentioned service is based exclusively on Art. 6(1)(a) GDPR and § 25 TDDDG. Consent that has been given may be revoked or modified at any time, effective in the future, via the website’s cookie settings. The lawfulness of the processing carried out prior to revocation remains unaffected. Unless consent has been obtained, the use of this service is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including those on social media.

The transfer of data to the USA is based on the EU standard contractual clauses. For further information, see https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5448.

You can opt out of LinkedIn’s analysis of usage behavior and targeted advertising via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on the PI website to your LinkedIn account, you must log out of your LinkedIn account before visiting the PI website.

PI uses the chatbot provided by LoyJoy GmbH, Kapuzinerstr. 20, 48149 Münster, Germany, to enhance its offering and provide various services, e.g., service chats, product consultations, initial contact, and marketing campaigns such as competitions.

The chatbot processes the following data:

Browser used and device type, visitor interactions, which may include personal data such as messages entered, contact details such as name, address, email address, or telephone number, service chat inquiries, product consultations, participation in competitions, and registrations.

The data collected by PI is used to enable the company to provide and improve its services and, following aggregation and anonymization, to conduct performance and success measurements.

Legitimate interest (Art. 6(1)(f) GDPR): Processing is based on PI’s legitimate interest in effective customer communication, support provision, and continuous improvement of its services.

Consent (Art. 6(1)(a) GDPR): Where website visitors have granted their consent, processing will be performed on this basis.

Performance of contract (Art. 6(1)(b) GDPR): When processing is necessary for the performance of a contract or pre-contractual measures.

Live chats: Data is stored for seven days.

Interactions with the chatbot: Data is retained for 30 days.

PI uses optional local storage technologies (e.g., local storage) on end devices to store the chat content for up to 14 days. This enables users to continue the chat seamlessly. The retained data can be deleted at any time via the browser settings.

Personal data may be transferred to data processors who assist PI in service provision. These data processors are contractually bound to uphold data protection standards in accordance with the GDPR.

As part of chatbot operations, PI uses the services of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare provides protective functions for the web application (web application firewall). Data transmitted between the respective visitor’s browser and the chatbot server travels via Cloudflare’s infrastructure and is analyzed there to protect against attacks.

Cloudflare operates servers within the European Union so that personal data is generally processed within the EU. However, personal data may be transferred to the USA in individual cases, such as when visitors from these regions access the PI chatbot. In such cases, Cloudflare ensures an adequate level of data protection pursuant to Art. 45 GDPR though certification under the EU-U.S. Data Privacy Framework (DPF).

Every individual has the right, for reasons arising from their particular situation, to object at any time to the processing of their personal data performed on the basis of Art. 6(1)(f) GDPR.

Personal data is generally collected by the applicants themselves in the form of application documents and sent to us. During the subsequent recruitment process, additional personal information may be obtained from job interviews. 

In particular, this includes the respective applicant’s basic details (e.g., first name, last name, suffix, date of birth, gender, nationality), contact information (e.g., home address, (cell) phone number, email address), and application documents (e.g., cover letter, resume/CV detailing educational and professional background, references, headshots, and additional information on marital status, residency status, social security number, previous employment history, and, where applicable, information on the legal guardians for minors). 

PI collects and processes personal data submitted during the application process for the purpose of carrying out the recruitment procedure. This includes all information provided by applicants to PI as part of their application documents and personal interviews, in particular their name, address, contact information, and resume. 

If the application process results in the decision to enter into a working relationship, PI will subsequently process the personal data collected as part of the interview process to then facilitate the establishment of the employment relationship. Employees will receive separate information regarding this processing at the beginning of their employment relationship. 

In the case of internal applications, personal data is processed within PI and shared within the corporate group for information purposes. The personal data will be used exclusively for processing the application and will not be shared with third parties outside of the corporate group. 

The legal basis for this data processing is Art. 6(1)(b) GDPR for the purpose of establishing an employment relationship and Art. 6(1)(a) GDPR when the applicant has given consent to share their personal data within the PI Group. 

In the following specific cases, personal data is processed to safeguard legitimate interests of PI or third parties, including: 

• Defense against asserted legal claims arising from the recruitment process 

• Burden of proof in proceedings under the General Act on Equal Treatment (AGG) 

• Screening against so-called EU terrorist lists in accordance with the European Counter-Terrorism Regulations 2580/2001 and 881/2002 

• Internal statistical purposes using anonymized data 

The legal basis in these cases is Art. 6(1)(f) GDPR. 

PI ensures that personal data is treated confidentially and is not disclosed to third parties. Access to the data is granted only to individuals within the PI Group who are involved in the decision-making process or who require the data to fulfill legal obligations.

Application data may be shared with companies within the PI Group if the applicant is recommended for another open position within the Group. 

Such data is shared exclusively within the PI Group and transmission is limited to a closed applicant management system. Data processing and transmission occur solely within the European Union. 

By providing consent for the processing of their personal data, applicants also agree to this internal transfer of their data within the PI Group. The purpose of this transfer is to consider their application for other suitable roles within the PI Group.