Otto Mayer Maschinenfabrik GmbH Privacy Statement
Controller and contact details
Otto Mayer Maschinenfabrik GmbH, Fischbachstraße 7, 72290 Lombach, Deutschland
You can contact us at any time if you have any questions regarding data protection. You can receive information on data protection at [email protected]
Contents of the privacy statement
In the following document, we will inform you about the processing of your personal data obtained through using our website. In principle, users can visit our site without registering. While such data remains anonymous, data such as pages visited or files accessed and their date and time are stored on our server for statistical use. Personal data, in particular, names, addresses, e-mail addresses may be collected at any time without permission. Data may not be transmitted to third parties without your permission.
The rights of the persons affected may be asserted should the corresponding criteria be met. Please note that you may be required to provide proof of identification in advance.
Right of Appeal
You have the right to appeal to a relevant supervisory authority (data protection authority), in particular in the EU Member State of your place of residence, your workplace or the place of suspected infringement, if you believe that the processing of personal data concerning you violates the Basic Data Protection Regulation or if your rights as a data subject have been violated. We would be most appreciative if you could contact us and offer us your opinion. A list of the supervisory authorities can be found here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
Should you wish to contact us directly, we are available to answer any questions you may have about data protection at [email protected]. We would like to point out that your queries can only be processed if you can confirm your identity.
Purposes of processing
In order to operate and maintain our IT systems and the company website, to ensure data security and to prevent abusive or fraudulent behaviour, we process our users' personal data solely as required for the provision of our services and its contents.
Legal bases and (substantial) legitimate interests
We process your data for pre-contractual provisions or contractual duties (such as fulfilling the terms and conditions, terms of use and article 6, paragraph 1, lit. b of the GDPR) to the extent legally required (article 6, paragraph 1, lit. c of the GDPR, e.g. consent to authorise cookies and ensuring the appropriate level of data security), as well as for the following (substantial) legitimate interests, based on article 6, paragraph 1, lit. f of the GDPR):
Receivers or receiver categories and transfers to third countries or international organisations
Transfers are not intended but users of our services and published data (such as comments) are, however, public and potentially accessible worldwide. If required, the data may be transferred to prosecution authorities, courts etc. for asserting legal claims made by the controller or third parties.
The data controller, Otto Mayer Maschinenfabrik GmbH, is part of a group of companies. For internal economic administrative purposes, we therefore also manage data processing for the other companies within the group. Therefore, the group has a substantial legitimate interest (recital 48 of the GDPR).
All associated companies and processors may be contacted regarding questions about data protection and the assertion of data subject rights via [email protected].
The collection of data from other sources: categories of personal data
For each visit to our website, our system automatically gathers data and information from the user's computer system.
The following data is collected from this:
Storage period
Data required for the functionality of our website will only be processed and saved for the duration of your visit to our pages. Log data and IP addresses will generally be saved for 7 days in order to deter attacks against our systems. In order to provide information on data security issues and to assert any damage claims, this information will be saved until the final settlement of such.
Provision of data
There are no legal or contractual duties to provide data. This data is, however, necessary for the functionality of our website and our IT systems, which can otherwise potentially become compromised.
Further processing of your data for other purposes
Part of the data collected will be further processed for marketing purposes. We will inform you about this and your right to object at the time of the collection. We kindly ask that you refer to section 3 of the privacy statement.
Purposes of processing
We collect personal data to deliver our products and render our services. This includes the online shop and the use of third party services through business relationships.
Legal bases and legitimate interests
The legal bases for the processing of data are pre-contractual provisions or contractual duties (article 6, paragraph 1, lit. b of the GDPR), legal and regulatory duties (article 6, paragraph 1, lit. c of the GDPR, in particular taxation law), as well as the following (substantial) legitimate interests (article 6, paragraph 1, lit. f of the GDPR):
Receivers or receiver categories and transfers to third countries or international organisations
In an emergency, personal data is transferred to the following receiver categories:
Transfers to third countries or international organisations only take place in these instances, if on the basis of an adequacy decision according to article 45 of the GDPR or on the basis of the requirements of article 49, paragraph 1, lit. b, c or e of the GDPR (the requirement to conduct pre-contractual provisions upon request by the affected person or, in their interest, the assertion, execution or defence of legal claims) or on the basis of consent, in accordance with article 49, paragraph 1, lit. a of the GDPR.
The data controller, Otto Mayer Maschinenfabrik GmbH, is part of a group of companies. For internal economic administrative purposes, we therefore also manage data processing for the other companies within the group. Therefore, the group has a substantial legitimate interest (recital 48 of the GDPR).
All associated companies and processors may be contacted regarding questions and the assertion of data subject rights via [email protected].
The collection of data from other sources: categories of personal data
Depending on the legitimate interest (value of the order, method of financing), we collect information about creditworthiness prior to accepting an order, as well as the following personal data.
In the online shop, cookies are used to operate the shopping basket and the order process.
Storage period
Until the termination of the business relationship or until the end of the guarantee, warranty, limitation and legal retention dates; moreover, until the termination of any legal disputes, which may require data as evidence. For as long as necessary in the case of services, where compensation claims are asserted, in accordance with the civil code or other titles (such as product liability).
Provision of data
The collection of essential data is necessary to conclude a contract.
Further processing of your data for other purposes
Part of the data collected will be further processed for marketing purposes. We will inform you about this and your right to object at the time of the collection. We kindly ask that you refer to section 3 of the privacy statement.
Purposes of processing
Customer service and marketing (direct advertising) for purposes of the controller or those mutually responsible, including from relevant newsletters, answering customer queries and sending advertisements in the post
Legal bases and legitimate interests
Legitimate interests on the basis of article 6, paragraph 1, lit. f of the GDPR:
Objection
You retain the right to make an informal objection at any time to the processing of data for these purposes and you may demand that we delete or restrict processing. We will inform you of your rights at the time of data collection.
Receivers or receiver categories and transfers to third countries or international organisations
In an emergency, personal data is transferred to the following receiver categories:
We use the services of the following processors:
The controller, Otto Mayer Maschinenfabrik GmbH, is part of a group of companies. For internal economic administrative purposes, we therefore also manage data processing for the other companies within the group. Therefore, the group has a substantial legitimate interest (recital 48 of the GDPR). Processing for marketing and customer retention measures solely takes place for the purposes stated by the controller, with whom there exists a business relationship; processing for such company purposes assumes the prior consent of the data subject.
All associated companies and processors may be contacted regarding questions and the assertion of data subject rights via [email protected].
Newsletter
On our website, you have the option of signing up for Felder KG's free newsletter via our contact form. The newsletter gives information about current offers, new products, special promotions and exclusive savings with respect to our range of goods and services. As part of this service, and on the basis of your consent, we will gather and process additional information about this (known collectively as usage data).
We use what is known as a "tracking pixel" in order to conduct statistical analyses for our newsletter. A tracking pixel is a miniature graphic that is embedded in e-mails sent in HTML format in order to allow log files to be recorded and analysed. This means that newsletter campaigns can be evaluated. With this tracking pixel, we can identify whether or not an e-mail has been opened by the person in question. Additionally, we also see which links are clicked most often by our recipients, which in turn allows us to optimise the content of the newsletters and adapt to the recipients' interests. The legal basis for processing data once someone has subscribed to the newsletter is Art. 6 (1) (a) of the GDPR, given the consent of the user. We would like to note that when dispatching the newsletter, we work with the company Emarsys, which has its head office in Vienna (Märzstrasse 1, 1150 Vienna). The data is to be stored and processed exclusively within the European Union.
This personal data will not be disclosed to third parties. If a data subject objects to this data collection, then at present, the only option is to unsubscribe from the newsletter.
The collection of data from other sources: categories of personal data
We use the services of the following processors:
Storage period
Data from interested parties and profiles on the online shops will be saved for 3 years from the date of the last contact with the customer. Addresses and email addresses will be saved for the duration of the advertising campaigns or until objection or unsubscription from a newsletter; moreover, data is saved if there is a request to restrict processing or if the processing is used for other purposes that require a longer duration (in particular, in accordance with section 2 of the privacy statement).
Provision of data
There is no obligation to provide data.
Further processing of your data for other purposes
For customer queries, depending on the type of query and the conduct of potential further processing in connection with deliveries and services, see the further details in section 2 of the privacy statement.
Purposes of processing
Provision of information regarding the controller's work and services in at least local or regional public interest.
Objection
You retain the right to make an informal objection at any time to the processing of data for these purposes and you may demand that we delete or restrict processing. We will inform you of your rights at the time of direct data collection and within the context of inviting you to events.
Legal bases and legitimate interests
The legal basis for processing is the freedom of expression, in accordance with articles 13, 17 and 17a of the Austrian constitution, as well as article 10 of the ECHR and, if published purposes are pursued, in accordance with article 85 of the GDPR in conjunction with section 9, paragraph 2 of the Data Protection Act (and for image data, section 12, paragraph 2 Z 4 of the Data Protection Act, if there is a substantial interest in the public display of major events in history); otherwise, the publication of image data will require the consent of the data subject (article 6, paragraph 1, lit. a of the GDPR / article 9, paragraph 2, lit. a of the GDPR).
Receivers or receiver categories and transfers to third countries or international organisations
No transfer receivers are intended, however publication is in the public interest and, insofar as this is available online, potentially accessible worldwide.
The data controller, Otto Mayer Maschinenfabrik GmbH, is part of a group of companies. For internal economic administrative purposes, we therefore also manage data processing for the other companies within the group. Therefore, the group has a substantial legitimate interest (recital 48 of the GDPR). Processing for marketing and customer retention measures solely takes place for the purposes stated by the controller, with whom there exists a business relationship; processing for such company purposes assumes the prior consent of the data subject.
All associated companies and processors may be contacted regarding questions and the assertion of data subject rights via [email protected].
Storage period
The storage period is limited to the same period as that for the data made and used for publishing purposes; depending on the interest in documentation, data may be permanently archived for later use (re-use) for the processing purposes described.
Provision of data
There is no duty to provide data.
Further processing of your data for other purposes
Data is only used for the intended purposes and, potentially for archiving purposes in the public interest, scientific, historic or research purposes or for statistical purposes, in accordance with article 5, paragraph 1, lit. b of the GDPR.
Purposes of processing
Time-limited record of personal data from unsolicited and solicited applicants, as well as for use in choosing an applicant and concluding a service contract.
Legal bases and legitimate interests
We process applicant data on the basis of article 6, paragraph 1, lit. b of the GDPR (pre-contractual provisions), as well as article 6, paragraph 1, lit. f of the GDPR, in order to contact applicants within the storage period and potentially, if in our interest or in the interests of a third party, to check their details if they are needed for a position requiring a higher level of confidentiality.
Receivers or receiver categories and transfers to third countries or international organisations
Your data will only be divulged to our employees if necessary. If references are provided, this may result in us contacting them. Similarly, in certain justified cases of substantial interest, your details may be checked by third parties (such as for checking stated qualifications and university degrees). Transfers to third countries or international organisations only take place in these instances, if on the basis of an adequacy decision according to article 45 of the GDPR or on the basis of the requirements of article 49, paragraph 1, lit. b of the GDPR (the requirement to conduct pre-contractual provisions upon request by the affected person) or on the basis of consent, in accordance with article 49, paragraph 1, lit. a of the GDPR.
The data controller, Otto Mayer Maschinenfabrik GmbH, is part of a group of companies. For internal economic administrative purposes, we therefore also manage data processing for the other companies within the group. Therefore, the group has a substantial legitimate interest (recital 48 of the GDPR).
The collection of data from other sources: categories of personal data
During contact with the references you have provided, data and information about your previous business relationship or employment, as well as subjective evaluations of your work performance, may be obtained by the relevant third parties. (Storage of this data and information is not intended.)
Storage period
If you have applied for an advertised position, we will keep your personal data for a maximum of three years following the end of the application period, then it will be deleted. Furthermore, you can informally object to this within eight months of the end of the application period.
If you have submitted an unsolicited application, we will keep your documents for a maximum of three years, so that we can contact you regarding any suitable positions. However, you can informally object at any time.
Provision of data
In order to process applications, it is necessary for you to provide evidence of your qualifications and contact details. In certain cases, regardless of the requirements of the position, it may also be necessary to obtain further data from you (such as a criminal record). If you cannot provide the required data, then your application for the position cannot be considered.
Further processing of your data for other purposes
If you enter into employment, your application documents will be further used for human resource purposes, with the exception of special data that is worth protecting (such as a criminal record). All other information will be provided to you before concluding the contract.
Purposes of processing
If you contact us by email, telephone or by using the form on our website, we will collect and process the data technically necessary for communication (depending on the chosen means of communication). This can include your telephone number, email address, the time (and potentially the duration) of the communication, etc. Incoming emails will also be processed through a spam filter, firewall, virus scanner, etc. in accordance with the purposes set out in section 1 of this statement.
Legal bases and legitimate interests
The data which you input will be processed for the purpose of answering your query on the basis of legitimate interests, as set out in article 6, paragraph 1, lit. f of the GDPR. Other processing purposes depend on the content of the communication and are covered by sections 1-6 of this privacy statement.
Objection
In accordance with processing for the purposes set out in article 6, paragraph 1, lit. e and f of the GDPR, you retain the right to make an informal objection at any time to the processing of data for these purposes and those arising from your particular situation and you may demand that we delete or restrict processing. We will inform you of your rights at the time of direct data collection (such as on the online form). This right does not apply if we process your query or communication for other reasons (such as contractual duties, legal duties and product liability) and if we have to store the communication for the relevant period of time stated in this privacy statement.
Receivers or receiver categories and transfers to third countries or international organisations
Depending on the purposes of communication, it may be necessary to conduct a relevant transfer, in accordance with sections 1 to 6 of this privacy statement.
The collection of data from other sources: categories of personal data
In every instance of contact, our systems gather data and information about the means of communication and the technical systems used by the data subject.
The following data is collected in this respect: the data subject's contact data (such as telephone number, email address, etc.), the time of the communication (date, time)
Storage period
The storage period depends on the time required to conclude communication on the issue raised; moreover, a longer storage period, regardless of the purpose of the communication, may be required, as stated in sections 1-6 of this privacy agreement.
Provision of data
There is no duty to provide data.
Further processing of your data for other purposes
Depending on the contents of your query or communication, further processing may take place for the purposes listed in sections 1 - 7 of this privacy agreement.
In order to stay in touch with our clients, communicate with interested parties, and represent Felder KG, we appear on certain social media networks.
We use this data for the purposes of market research and advertising. For example, this includes advertising products and services offered by the company, taking measures to gain customers and to improve customer loyalty, improving our online and offline appearance and improving overall client communication. Users' personal data is therefore processed on the basis of Art. 6 (1) (f) of the GDPR. As an operator on a social media network, we have a legitimate interest in providing users with information and communicating with users effectively.
We are entitled to store personal data on our servers unless permission is withdrawn. This means that your data will be stored at least until the termination of the business relationship or until the end of the applicable guarantee, warranty, limitation and statutory retention dates; moreover, the data may be stored until the termination of any legal disputes that may require data as evidence. In the case of services for which compensation claims may be asserted in accordance with the Austrian Civil Code (ABGB) or other legislation (such as product liability), we store this data for the required duration.
We would like to draw your attention to the fact that there is no obligation to submit your data via social media channels. You are also very welcome to choose a different channel in order to contact us (Website, E-mail).
Facebook
On Facebook, we operate a fan page as a joint controller, as defined in Art. 26 of the GDPR. In accordance with this agreement, Facebook is responsible for fulfilling most of the duties relating to data protection legislation, especially for complying with obligations to maintain transparency, data security, reporting data breaches and asserting the rights of data subjects. If you get in contact with us regarding these issues, we will pass your enquiries on to Facebook. Facebook complies with its duty to provide information on "Insights" here.
In the proceedings C-210/16 on 5 June 2018, the European Court of Justice (ECJ) ruled that when using "Page Insights" during the operation of a fan page, the responsibility is held jointly by the operator and Facebook. Within Europe, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for matters concerning data privacy.
Alongside Facebook, we are jointly responsible for the data processing, insofar as we are able to influence the processing Facebook undertakes on your data.
For all processing for which Facebook takes sole responsibility, we refer you to the company's data privacy policy.
As the owner of the fan page, we have no influence over the processing of your data but we can use this data to segment our posts. In this process, we analyse the data according to the following criteria:
If you subscribe to our fan page or become a fan, it will be possible to access your Facebook profile in accordance with Facebook's terms of service and your privacy settings. Facebook collects your data for purposes including processing statistics for Insights in accordance with its data privacy policy. We have no say over this processing and can make decisions for evaluations only in the case of non-personal statistics on the basis of predetermined criteria.
Using the content collected, usage profiles can be compiled that can then in turn be used for adverts within and beyond the social media channel. This process is made possible through the use of cookies, which are stored on the user's computer. However, data pertaining to social media users can also be stored by the provider elsewhere, particularly when these users are registered and signed in to their social media account.
Generally, there will be no further processing of your data for other purposes. Nevertheless, depending on the purposes of communication, it may be necessary to process the data further, in accordance with our general privacy statement, available on our Homepage.
You can raise an objection to the processing in our area of responsibility at any time by deleting your own comments and likes or deleting a link you set up to our fan page, or by getting in contact with us (see the section on "Data subjects' rights"). For more information on your right to object or withdraw consent in relation to processing undertaken by Facebook, please contact that company. You can submit an objection to processing for which Facebook is responsible here: www.facebook.com or www.youronlinechoices.com.
Content and likes etc. published and shared by users on our fan page can be viewed throughout the world. Facebook also processes data outside the European Union on the basis of the "Privacy Shield" and the relevant adequacy decision, in accordance with Art. 45 of the GDPR. Facebook is therefore obliged to comply with the European data privacy regulations. You can find additional information about Facebook's Privacy Shield status here. We have no influence over the data collection and processing undertaken by Facebook for the "Insights" tool.
Instagram
Felder KG uses some features of the Instagram service on its website. Instagram is an online service for sharing photos and videos and belongs to Facebook. It operates as a mixture between a microblog and an audio-visual platform, allowing its users to circulate data in other social media networks.
The provider of Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
We are responsible for the processing of data insofar as we are able to influence this processing. For all processing for which Instagram takes sole responsibility, we refer you to that company's data policy.
Visiting our website activates certain Instagram features that make it possible to gather information on user behaviour. If the user in question is logged in to Instagram at the same time, this data can be matched with their user profile, in which case the data is processed and stored by Instagram. If you do not consent to this user profile being created, you can prevent it by logging out before visiting our website.
If a data subject objects to the processing of data located within our sphere of responsibility, they can first delete their own comments and likes, and they can also "unfollow" our page (for more information, see the section on "Data subjects' rights"). For more information on your right to object or withdraw consent in relation to data processing undertaken by Instagram, we ask that data subjects get in contact with that company (Data policy).
Posts that users have reacted to with a "heart" and shared content can potentially be viewed throughout the world. Instagram, like its parent company Facebook, processes data outside the European Union on the basis of the "Privacy Shield" and the corresponding adequacy decision, in accordance with Art. 45 of the GDPR. Instagram and Facebook are therefore obliged to comply with the European data privacy regulations. You can find additional information about Instagram's Privacy Shield status here.
LinkedIn
We have incorporated features by the company LinkedIn on this website. This platform is a social media network intended for cultivating existing business contacts and establishing new business relations. With more than 500 million users from more than 200 countries (as of January 2018), LinkedIn is one of the 50 most visited websites. Since December 2016, LinkedIn has been owned by Microsoft.
The operating company is LinkedIn Corporation, 2029 Stierlin Mountain View, CA 94043, USA. Within Europe, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is responsible for ensuring compliance with European data privacy regulations.
We are responsible for the processing of data only insofar as we are able to influence this processing. You are very welcome to contact us at any time on www.felder-group.com or by e-mail.
Every time the website is visited, the LinkedIn features are downloaded to show a corresponding image of the browser in use. During this process, LinkedIn receives information about which sub-pages have been visited. You can look up more information about LinkedIn plugins here.
If a data subject is logged on to LinkedIn at the same time, the platform will receive information about user behaviour (e.g. which sub-pages are visited, how long the user spends on them, etc.). If plugins are activated, this information can also be matched to the relevant user's account. If users do not want this information to be transferred to LinkedIn, it is possible to log out before visiting our website.
The platform offers the option of unsubscribing from targeted advertising through personal preferences regarding e-mails and text messages. LinkedIn works with companies such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may use cookies. You can opt out of the use of such cookies here. Applicable data privacy regulations and cookie policies can be found here: Privacy policy | Cookie policy.
Posts that users have reacted to with a "like" and shared content can potentially be viewed throughout the world. LinkedIn also processes data outside the European Union on the basis of the "Privacy Shield" and the relevant adequacy decision, in accordance with Art. 45 of the GDPR. LinkedIn is therefore obliged to comply with the European data privacy regulations. You can find additional information about the Privacy Shield status here.
Pinterest
Felder KG uses some Pinterest features on its website. Pinterest is a social media network and a visual search engine where users can find inspiration and "pin" ideas on virtual pin boards.
The provider of this network is Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA. European users should direct any concerns regarding data privacy to Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
We are responsible for the processing of data only insofar as we are able to influence this processing. For all processing for which Pinterest takes responsibility, we refer you to the company's Privacy policy. Furthermore, users can find options regarding their information here and can also find out how and where to opt-out.
By using Pinterest features, we are able to gather anonymised information about user behaviour. If the data subject is logged on to Pinterest at the same time, this data can be matched up with their user account. If you do not want this, we recommend logging out of Pinterest before visiting our website.
Public pins and pin boards are visible to everyone. This means that if data subjects object to this data processing, they should create private pin boards, and they should no longer follow the themes that we publish. For more information on your right to object or withdraw consent in relation to data processing by Pinterest, we refer you to that company's regulations.
Pinterest is a global service. This means that data can also be stored and processed outside the European Union. In the EEA, however, the company is certified by the "Privacy Shield", which means that the European data privacy regulations must be complied with. You can find out more here.
Twitter
We have integrated some Twitter features on our website. Twitter is a microblog service owned by Twitter Inc., 1355 Market Street, Suite 900 in CA 94103 San Francisco, USA. On this platform, users can publish short and snappy messages ("tweets").
We are responsible for the processing of data only insofar as we are able to influence this processing. You can read more detailed regulations about Twitter's data privacy policies here.
When the website is visited, the Twitter features will be downloaded in order to allow a corresponding image of the browser in use. During this process, Twitter will be informed of information, including which specific pages have been visited. More details about the plugins used can be found here.
If a data subject is logged on to Twitter, all the data collected can be matched up with their user account, including how long they spend on the website and the pages they visit. This will take place regardless of whether or not the data subject clicks on the Twitter features. This data is stored and processed by Twitter. If you do not want this data to be transferred or matched up with you, you can prevent it by logging out of Twitter before visiting our website. You can find out more information and your options for opting out here.
Content that is "favourited" or shared can potentially be viewed throughout the world. Twitter Inc. also processes data outside the European Union on the basis of the "Privacy Shield". Twitter Inc. is therefore obliged to comply with the European data privacy regulations. You can find out more about the Privacy Shield status here.
YouTube
Some YouTube features are incorporated on our website. YouTube is a video portal operated by the US American company YouTube, LLC, which has functioned as a subsidiary of Google, LLC since 2006. The YouTube head office is in San Bruno, 901 Cherry Ave., CA 94066, USA. On this platform, video clips can be put online and played, rated and commented on for free. YouTube makes it possible to publish, for instance, excerpts from films and TV shows, music videos and trailers as well as home videos and slideshows.
We are responsible for the processing of data only insofar as we are able to influence this processing.
When our website is called up, the YouTube features are loaded. If the data subject is logged on to YouTube at the same time, the data regarding the page visit and the duration of the visit can also be matched up to their user account. You can prevent this by logging out of YouTube before visiting our website.
You can find out more about the gathering, processing and use of personal data by YouTube here. The data gathered that is matched with the Google account and the personalised advertising associated with this can be managed here.
YouTube (and therefore also Google) also processes data outside the European Union. Comments, ratings and shared content can sometimes be viewed throughout the world. By belonging to what is known as the "Privacy Shield", YouTube guarantees its compliance with European data privacy regulations. You can find more information about YouTube/Google's Privacy Shield here.
