Data privacy statement

1 Collection, processing & storage of data

We collect and use your personal data exclusively within the framework of the legal provisions of the data protection laws of the Federal Republic of Germany. Personal data will only be passed on to third parties with your express consent and only for the corresponding purpose. We reserve the right to forward data to authorities and courts where there is a legal necessity to do so.

1.1 Access Data

When accessing our website, the IP address of your computer is recorded by the provider. The storage serves internal system-related and statistical purposes.

1.2 Personal Data

Personal data refers to information that can be assigned to specific individuals. Personal data such as name, company, address, telephone number, or email address is collected only with your consent, for example, when you create a customer account, place an order, or otherwise provide the corresponding data via an online form. For downloads, this action is logged in the provider’s logfile. These data are stored for internal processing in compliance with data protection laws.

1.3 Company-Related Data

For our end customers – as device users – we record the business sector of the customer’s company and the product portfolio used. We use both pieces of information, among other things, for advertising purposes, to further develop our products, and to manage regular services such as calibrations or verifications.

1.4 Order Processing

The personal data you provide will be passed on to the transport company commissioned with the delivery and, where applicable, to service partners involved in order processing, insofar as this is necessary for the delivery of the goods. We will also pass on your payment data to the bank commissioned to process the payment. We will gladly inform you which partners were involved in processing your order upon request.

1.5 Confidentiality in Laboratory Activities

All data collected, processed, or stored in connection with calibration and laboratory activities—particularly measurement data, calibration results, device-related information, and technical specifications—are treated as strictly confidential. This applies regardless of whether the data are personal or company-related. Disclosure of such data takes place only upon the customer’s express request or consent, or if the information has been made publicly accessible by the customer.
 

2 Forms & Cookies

Information voluntarily entered via forms must be stored for technical reasons. When filling in forms for creating a customer account or placing an order, the entire content of the entry as well as the date, time, and IP address of the sender are stored in the database. If you complete an inquiry form, this information is transmitted to us by email. We also use so-called “cookies.” They help make our website more user-friendly, efficient, and secure, particularly to speed up navigation on our platform. In addition, cookies enable us to measure the frequency of page views and general navigation behavior. Please note that some of the cookies are transferred from our server to your system. These are usually so-called “session cookies,” which are automatically deleted from your hard drive after the session ends. Of course, you can refuse cookies at any time, provided and to the extent that your browser allows this. 
 

3 Applications

If you apply for a position advertised by us or send a speculative application, your data will be stored and processed in accordance with legal requirements. Your data will not be used beyond the application process. By submitting your application, we assume that you consent to the storage and processing of your data. For the management of the application process, we use a data protection-compliant applicant management system provided by rexx systems GmbH. See also sections 5 Career Portal and 7.1 Matomo.

4 Technical infrastructure, hosting & portals

4.1 Hosting of webshop & landing pages

Our webshop (www.kern-sohn.com) is hosted by our service provider Sylphen GmbH. In addition, individual landing pages (lp.kern-sohn.com) are operated by our partner Limtec GmbH, Halderstr. 16, 86150 Augsburg, Germany. Data processing agreements in accordance with Art. 28 GDPR have been concluded with both service providers. Processing is carried out exclusively for the provision and operation of our online services. No data is transferred to third countries.

5 Careers portal

Use of rexx systems as applicant management system

As part of the application process, we use the applicant management system “rexx systems” provided by rexx systems GmbH, Süderstraße 75–79, 20097 Hamburg, Germany. Processing is carried out solely for the purpose of handling your application in accordance with Art. 6 (1)(b) GDPR (pre-contractual measures). After completion of the application process, your personal data will be deleted after 6 months. When using the online application portal, technically necessary cookies are set, e.g. for session management (“sid”) or to store the consent status (“cookieconsent_status”). These cookies do not contain personal data and serve exclusively for technical operation. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

Cookies used in the applicant portal https://jobs-portal.kern-sohn.com/:

6 Third-party services

6.1 Doofinder

We use the search technology Doofinder to improve user experience and provide a fast product search. The provider is Doofinder, S.L., Calle Cronos 63, 28037 Madrid, Spain.
When using this search, Doofinder may process technically necessary information (e.g. IP address, entered search terms, technical device data). Processing is carried out on the basis of our legitimate interest pursuant to Art. 6 (1)(f) GDPR in offering a user-friendly and efficient product search. We have concluded a data processing agreement pursuant to Art. 28 GDPR with Doofinder. Personal data is not stored beyond the duration of use, nor shared with third parties. Data processing takes place on servers located in Ireland. There is no transfer to third countries.
Further information on data protection at Doofinder is available at: https://www.doofinder.com/de/privacy-policy

6.2 Use of Zendesk

We use the support system Zendesk provided by Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA, for efficient handling of support requests and structured communication with users. The following data may be processed: name, email address, content of the inquiry and any uploaded attachments. Storage takes place on servers within the European Union. Zendesk automatically deletes support tickets and related personal data 40 days after final closure. When accessing our Help Center, only technically necessary cookies are set, such as for session management. Processing is carried out depending on the case on the basis of Art. 6 (1)(b) GDPR (contract fulfilment or pre-contractual measures), Art. 6 (1)(f) GDPR (legitimate interest in efficient support processing) or, in the case of live chat, Art. 6 (1)(a) GDPR (consent). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Zendesk. Further information can be found in the Zendesk Privacy Notice.

6.3 Google reCAPTCHA

We use Google reCAPTCHA to prevent automated access (e.g. by bots) and to ensure the security of our online services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. User behaviour is analysed in the background, and cookies as well as local storage objects are used. Personal data may be transferred to the USA based on the EU Commission’s Standard Contractual Clauses. Processing is based on our legitimate interest under Art. 6 (1)(f) GDPR in ensuring the security of our online services. An overview of the cookies used can be found in our cookie declaration. Further information is available at https://policies.google.com/privacy.

7 Web Analytics & Tracking

7.1 Matomo

We use the web analytics software Matomo (www.matomo.org) on our careers portal to evaluate user behavior in a privacy-friendly way and to continuously improve our offering. Processing is carried out solely on the basis of your consent in accordance with Art. 6 (1)(a) GDPR. Cookies are used to recognize returning visitors and technically assign sessions. The IP address is anonymized before storage. The analysis takes place without creating user profiles or disclosing data to third parties. Data processing is carried out on Matomo Cloud servers located in Germany. No data is transferred to third countries. You can withdraw your consent at any time via the cookie consent banner at https://jobs-portal.kern-sohn.com/.

Further information about Matomo’s privacy features can be found at: https://matomo.org/privacy-policy/

7.2 Use of Google Analytics 4

Our website uses the web analytics service Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 uses cookies and similar technologies to analyze and improve the use of our website. The following data may be collected: pages visited, interactions, approximate location (based on IP address), technical information about browser and device, and referrer URLs.
Google uses IP anonymization, which means that your IP address is shortened within the EU/EEA before being stored. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and shortened there. Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses.
An overview of the cookies used can be found in our Cookie Declaration. Legal basis: The use of Google Analytics 4 is based on your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG. You can withdraw your consent at any time with effect for the future via the cookie settings. Purpose of processing: The processing serves to analyze user behavior in order to optimize our website and our offers.

8 Deletion of Data

Stored personal data will be deleted if the user of the website and/or a customer revokes their consent to storage of the data, when knowledge of the data is no longer required to fulfill the purpose for which the data was stored, or if storage of the data is prohibited for other legal reasons. Data used for the purposes of billing and accounting are not affected by a request to delete data.

We have appointed an external data protection officer, whom you can contact by e-mail at datenschutz (at) kern-sohn.com or by post at

Data protection officer
KERN & SOHN GmbH
Ziegelei 1
72336 Balingen
Germany
 

9 Right to Information

Users of our website have the right to request information from us about stored data relating to their person or to their pseudonym. This information can also be provided electronically on request.

10. Software Products by KERN & SOHN

10.1 BalanceConnection

10.1.1 BalanceConnection – Technical Provision & Hosting

The product site balanceconnection.kern-sohn.com is operated on the internal IT infrastructure of KERN & SOHN GmbH in Germany. All data processed during use is stored exclusively within the EU; no data is transferred to third countries. When accessing the site, server log files are automatically generated for technical reasons (e.g. IP address, date/time, requested file, browser information). This data is processed to ensure system operation, IT security and error analysis, based on Art. 6(1)(f) GDPR. Only technically necessary cookies are used; no tracking or marketing cookies are employed for BalanceConnection. The stored data is retained only as long as necessary for secure operation and fault analysis, and is then deleted or anonymised. Data is not shared with third parties unless legally required. Data transmission is encrypted. In addition, appropriate technical and organisational measures (such as access controls and security logging) are implemented to ensure the protection of your data.

10.1.2 BalanceConnection – Windows Software

When using the KERN BalanceConnection application (Windows), you may need to grant access to certain device features and information to ensure proper functionality. The following explains what we access, which data are processed, and how we protect your privacy.

What we access
Device connectivity: The application requires access to various communication interfaces to discover devices and transfer data.
1. Bluetooth access: The application uses the system’s Bluetooth functionality to discover, connect to and communicate with nearby devices, such as Bluetooth Low Energy (BLE) devices. Access is initiated only when the user enables Bluetooth communication to connect to a device. Once communication ends, the application no longer accesses Bluetooth functions.
2. USB access: The application requires access to USB ports to detect and communicate with USB-connected devices. This is used for data transfer between the application and the connected device.
3. Network access (IP-based devices): For devices connected via local networks or the internet, the application requires network access to identify and establish communication. The application may use the device’s IP address to connect to such devices or to send data to servers, applications or other endpoints specified by the user.

File storage access: Storage permissions are required to save transaction logs, exported data files (e.g., CSV, Excel) and configurations created within the application. Storage is also used to upload or restore data (e.g., importing files or restoring backups). This permission is only used when the user initiates the respective functions.

Audio information: Permission to modify audio settings may be required so the application can play audio cues, for example to indicate whether a functional target has been reached or whether measurement data were transferred successfully.

Background operations: The application includes a Windows Service to ensure continuous communication with connected devices and background data processing. The service can be configured to start automatically with the system and includes an auto-stop option to conserve resources when no active connection exists.

Administrator privileges: Administrator rights are required to manage Windows services for background operations. These permissions are requested only when necessary and are essential for proper application functionality.

What data we collect
Device and transaction data: The application processes details of connected devices (e.g., device type, unique identifiers) and information about operations performed via the application, including timestamps, user details and device interactions.
User-provided information: If, during use, you provide data such as your name, email address, company name or other contact details (e.g., for support requests), this information is stored exclusively locally on your system.

Purposes and legal bases
Data are used to ensure the proper operation, connectivity and communication of the software, to improve usability and – where necessary – to provide technical support. The processing is based on Art. 6(1)(b) GDPR (performance of a contract/use of the software) and Art. 6(1)(f) GDPR (legitimate interests in stability, security and improvement). Where you voluntarily submit additional information or consent to specific functions, processing is based on Art. 6(1)(a) GDPR (consent).

Storage, duration and deletion
All data are stored exclusively locally on your system and retained only as long as necessary for the purposes described or as instructed by you. No data are transferred to external servers unless explicitly configured by the user. Uninstalling the application or deleting program data removes or anonymises stored information.

Disclosure of data
Data are not shared with third parties unless required to comply with legal obligations or expressly authorised by the user. In the context of corporate restructuring (e.g., mergers or acquisitions), information may be transferred where necessary and legally permissible.

Your rights
You may exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection at any time. Requests can be submitted by email to datenschutz@kern-sohn.com or by post to the address provided in this privacy notice.

10.2 EasyTouch

10.2.1 EasyTouch – Technical Provision & Hosting

The product area easytouch.kern-sohn.com is operated on the internal IT infrastructure of KERN & SOHN GmbH at its site in Balingen, Germany. The website is used solely to provide information and to offer the download of the EasyTouch software.

No personal data is processed or stored via the EasyTouch website. In particular, no server log files are collected or evaluated. There is no monitoring, no logging of accesses or downloads, and no analysis of user behaviour. The EasyTouch website does not use cookies and does not employ any analytics, tracking, or marketing tools. No data is transferred to third parties, and no personal data is stored on servers or in cloud systems. No data is transferred to third countries.

10.2.2 EasyTouch – Android App and Windows Software

When using the EasyTouch application (Android or Windows), you may be asked to grant certain permissions on your device to ensure proper functionality. Below we explain which information and permissions are required, for which purposes they are used, and which privacy rights you have.

What we access
Location information: Location data indicate the approximate location of your device. The app uses location only when you actively use a location-dependent feature. Location access is used solely during Bluetooth scanning to discover nearby weighing devices and establish a Bluetooth connection. Once communication ends, location access stops. EasyTouch requests foreground location permission only (i.e., while the app is in use). You can deny location access; in that case, a Bluetooth connection to a scale is not possible.
Network information: In scenarios such as purchasing or activating a Save Server licence, locally generated data can be synchronised over the network with a secure server. For this, the app uses network state, phone state and other permissions granted by the user. Without an active licence, no synchronisation with cloud or server services takes place.
Storage information: Storage permissions are required to create backups and export transaction data or save configuration files. Exported data are stored locally on the device (e.g., as Excel files).
Audio information: Permission to modify audio settings is required to play notification sounds – for example, to indicate whether a reference value has been reached or exceeded.

What data we collect
If you sign in with your KERN account, you voluntarily share information such as your name, email address, company and telephone number. EasyTouch also processes transaction data related to weighing functions (e.g., weighing details, measurements, device parameters). These data are stored exclusively locally on your device.

Purposes and legal bases
Processing is carried out to provide app functionality, enable connections to scales, create backups or exports and – where a licence is in place – synchronise data with the EasyTouch Save Server or Save Cloud. Anonymised data may also be used to improve the app or to provide support. The legal bases are Art. 6(1)(b) GDPR (performance of a contract/use of the application), Art. 6(1)(f) GDPR (legitimate interests in stability, security and improvement) and Art. 6(1)(a) GDPR (consent) where you provide information voluntarily or grant specific permissions such as location access.

How we use the collected data
Information processed by EasyTouch is stored exclusively locally on your device. It is not shared with third parties. Data are used to provide app functionality, introduce new features, improve the application and provide technical support. Synchronisation with the EasyTouch Save Server or Save Cloud only occurs if a licence has been purchased and synchronisation has been activated.

Your choices
You control which permissions you grant. You can edit profile data in your user account and decide in your device settings whether and how precise location permissions are shared. If you deny certain permissions, some features may not be fully available.

Disclosure and sharing
EasyTouch does not share information with third parties unless required by law or another legal obligation. In the event of corporate restructuring, mergers or acquisitions, data may be transferred where legally permissible and necessary.

Storage, duration and deletion
All information is stored exclusively locally on your device for as long as necessary to provide the service. Data are removed or anonymised when you uninstall the application or manually delete stored data. Transfer to servers or cloud systems only occurs with an active licence and when synchronisation is enabled.

10.3 Changes to this Privacy Notice

We may update these software-related privacy notes from time to time to reflect legal, technical or operational changes. The current version forms part of KERN & SOHN’s general privacy policy. In the event of material changes, we will provide notice via appropriate channels – where applicable also within the app or software – and, where required by law, obtain your consent. By continuing to use our software after such changes take effect, you agree to the updated notice.