Privacy policy

The website is provided and operated by HENSOLDT AG, Willy-Messerschmitt-Strasse 3, 82024 Taufkirchen, phone: +49.89.51518-0, e-mail: info@hensoldt.net

Basically, the respective HENSOLDT company with which you enter into a business relationship or with which you are connected as a business partner is responsible for processing your personal data in the context of that business relationship.
An overview of the companies within the HENSOLDT Group, including their contact details, can be found at the end of this privacy notice.

The correct implementation of data protection is supervised by a data protection officer. If you have any concerns regarding the processing of your personal data, you can contact him or her directly.

You can reach the Data Protection Officer of HENSOLDT AG at:
Data Protection Officer
Willy-Messerschmitt-Strasse 3
82024 Taufkirchen
E-mail: dataprotection@hensoldt.net

The Data Protection Officer is solely responsible for the HENSOLDT companies that are legally required to appoint a Data Protection Officer.

The subject of data protection is the protection of personal data. This is all information that relates to an identified or identifiable natural person (so-called data subject).

This includes information such as name, postal address, e-mail address or telephone number, but also other information that your Internet browser transmits to our web server, e.g. date and time of the request, page from which the file was requested.

3.1. Accessing website

If you simply access the website without registering or otherwise providing us with information (e.g. via a contact form), we collect information about your interaction with our website, including your device and user ID, information about your operating system, subpages accessed during your visit, the date and time of each visitor request ("usage data"). This data is temporarily stored in a so-called "log file".

The collection of this data is technically necessary to display our website to you and to ensure its stability and security. The aforementioned data is processed for the purpose of ensuring the smooth establishment of a connection to the website, its convenient use and system security and stability.

The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the aforementioned processing purposes. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. The above-mentioned data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

3.2. Google Fonts (operating on own server)

We use Google Fonts for a consistent display of fonts and for user-friendliness. The fonts are hosted on our own server. This means that no data is transmitted to Google Ireland Limited. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to be able to display our internet offer in a visually appealing version.

3.3. Newsletter

We use the e-mail marketing tool "CleverReach" from CleverReach GmbH & Co KG, //CRASH Building Schafjückenweg 2, 26180 Rastede, Germany for e-mail dispatch and automation services, on our website.

Our newsletters and electronic notifications are only sent with the consent of the recipients or based on legal regulations. We use your personal data to send you our newsletter and to inform you about news and event information from HENSOLDT and the defence industry. We can also inform you about new, updated products and services from HENSOLDT. If you subscribe to our newsletter, the above-mentioned contents are decisive for your consent. As a rule, it is sufficient to provide your e-mail address. However, as part of the newsletter registration process, you will also be given the opportunity to specify your interests according to various subject areas to provide a personalized service. We keep a record of the registration process to be able to prove that it has been carried out properly.

You can unsubscribe from the newsletter at any time or withdraw your consent at any time by sending an email to info@hensoldt.net. If you do so, we will immediately remove you from our newsletter mailing list to comply with your request. We may retain the data for up to three years to be able to prove former consent. The processing of this data will be limited to the purpose of a potential defence against claims.

You can find out more about the data processed by CleverReach in the privacy policy at , le

3.4. Contacting us via e-mail or contact form

When you contact us via email or a contact form, as outlined in the “Events” section of the website, the data you provide (your email address, and if applicable, your first name, last name, and your inquiry) will be stored by us in order to answer your questions and address your concerns. The legal basis for this is Art. 6 para. 1 lit. f GDPR, as our legitimate interest lies in responding to your inquiries and concerns.

You can particularly reach us through the contact form in the "Contact" section of our website. The information marked as mandatory fields (such as first name, last name, and email address) is necessary. Additionally, you have the option to voluntarily provide further information, including any data you include in the free text field of your message to us.

If it is necessary to process your inquiry, it may also be forwarded to other departments within our company or to other companies in the HENSOLDT Group. In exceptional cases, this may also involve affiliated companies outside the European Union (EU) or the European Economic Area (EEA). We ensure an adequate level of data protection at the affiliated companies of the HENSOLDT Group outside the EU/EEA in accordance with Articles 44 et seq. of the GDPR.

The processing of your data for contacting us is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, to appropriately process and respond to your inquiry. This legitimate interest also includes the possible necessary forwarding of your inquiry to affiliated companies of the HENSOLDT Group. If you submit an inquiry in the context of a contractual or pre-contractual relationship, the processing will be based on Art. 6 para. 1 lit. b GDPR to fulfill our contractual obligations or to respond to (pre-)contractual inquiries.

Your data that we have received while contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

3.5. Our career page / Links to other websites

Our website contains a link to our career page. For the processing of your personal data when you visit our career page and apply through it, please refer to the privacy policy provided there.

When we provide links to websites of other organizations or other HENSOLDT websites, the privacy policies and statements of those websites apply.

3.6. Procurement

3.6.1 Application as a supplier

The respective HENSOLDT company with which you enter into a supplier relationship is generally responsible for the processing of other data in the context of the purchasing or procurement process and in connection with the relationship with suppliers or procurement partners.

The supplier form is intended solely for initial contact by potential suppliers of the HENSOLDT Group. It allows interested companies to provide information about themselves and their services in order to be considered as a potential business partner.

As part of the supplier application process, we process company data as well as personal data of the designated contact person (e.g., name, position, email address, telephone number). Mandatory fields are marked with an asterisk (*).
The data processing is carried out for the purpose of reviewing and selecting potential suppliers, creating a supplier profile, and implementing pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR. In addition, we have a legitimate interest in a structured supplier selection process and efficient communication pursuant to Art. 6 para. 1 lit. f GDPR.
Affected individuals are employees or contact persons of applicant companies.

The data may be shared within the company with the relevant departments (e.g., Procurement, Quality Assurance) and with IT service providers involved in technical processing (pursuant to Article 28 GDPR).

The data will be stored for the duration of the selection process and deleted no later than six months after its conclusion, provided no contractual relationship is established or unless statutory retention obligations require otherwise.

The data is either provided directly as part of the application process or – where permissible – obtained from publicly accessible sources, such as corporate websites or the commercial register.

3.6.2. Registration with IntegrityNext (Supplier assessment)

To fulfil our due diligence obligations along the supply chain, we use the IntegrityNext platform. Through our website, we invite suppliers to create a user profile on the IntegrityNext platform.

The data processing by IntegrityNext is carried out exclusively for the purpose of registering on the IntegrityNext platform and for conducting the assessments required within the platform. The legal basis is Art. 6 para. 1 lit. b and/or c GDPR, to fulfil contractual obligations and legal requirements.

In order to create a user profile on the IntegrityNext platform, the following personal data is processed in particular: name, company, position within the company, telephone number, email address.

IntegrityNext deletes the personal data once storage is no longer necessary. If legal retention obligations exist, processing will be restricted accordingly.

We delete personal data in accordance with the statutory provisions as soon as the underlying consents are withdrawn or there is no further legal basis for processing. However, there are exceptions if legal obligations or legitimate interests require longer storage or archiving of the data. Our data protection information contains further information on the retention and deletion of data. If there is more than one retention or deletion period, the longest period always applies.

We process data that is no longer stored for the originally intended purpose, but due to legal requirements or other reasons, exclusively for the reasons that justify its storage.

Regarding the use and storage duration of cookies, please refer to the cookie policy.

Your personal data will not be transferred to third parties unless,

• you have given your express consent to this,
• the disclosure is necessary for the establishment, exercise, or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• there is a legal obligation for the disclosure,
• the transfer is legally permissible and necessary for the processing of contractual relationships with you.

Data transfer within the HENSOLDT organization: We may transfer or grant access to personal data to other departments or units within our organization. If the data transfer is for administrative reasons, it is based on our legitimate business and commercial interests or if it is necessary to fulfil our contractual obligations or if we have the consent of the data subject or legal permission.

We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In the case of such data transfers, the high European level of data protection does not apply. In such cases and where required by applicable data protection law, HENSOLDT will take measures to ensure appropriate and adequate safeguards for the protection of personal data elsewhere.

• We only pass on your data to HENSOLDT Group companies in third countries if they have concluded EU standard contractual clauses with HENSOLDT.
• We only transfer your data to external recipients in third countries if they have concluded EU standard contractual clauses with HENSOLDT.

If you have any questions about such data protection contracts based on the EU standard contractual clauses or would like more information on further security mechanisms and security measures for data transfers to third countries, please feel free to contact us by email at dataprotection@hensoldt.net.

We use the widespread SSL (Secure Sockets Layer) method in conjunction with the highest level of encryption supported by your browser.
You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the upper status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

We do not intend to use personal data collected from you for automated decision-making (including profiling).

We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data.

If this should exceptionally be the case within the scope of the products or services offered by us as presented above, you will be informed of this separately.

We may be subject to a special legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public authorities, in accordance with Art. 6 para. 1 lit. c GDPR.

If the conditions specified in the law are met, you are entitled to the following rights:

• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure (‘right to be forgotten’), Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to object, Art. 21 GDPR
• Right to data portability, Art. 20 GDPR
• Right to lodge a complaint with the competent supervisory authority, Art. 77 GDPR
• Right of withdrawal with effect for the future if consent has been given, Art. 7 para. 3 GDPR

The supervisory authority responsible for us is: Bavaria DPA (Bayerisches Landesamt für Datenschutzaufsicht)

House address: Promenade 18, 91522 Ansbach, Germany
Postal address: P.O. Box 1349, 91504 Ansbach, Germany

Information about your right to object in accordance with Art. 21 GDPR:
Pursuant to Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on lit. (e) or (f) of Article 6 para. 1 GDPR, including profiling based on those provisions.
Where personal data are processed for direct marketing purposes, you also have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
The objection can be sent informally to the following e-mail address: dataproection@hensoldt.net. _

Please note that we regularly update our privacy policy to reflect changes in our data processing practices. We will inform you if your cooperation (e.g. consent) or individual notification is required.

If we provide addresses and contact information of companies and organizations in this privacy policy, please note that these may change over time. Please check the information before contacting us.