Data Protection

How do we collect your personal data?

We will usually collect your personal data directly from you. Unless otherwise stated herein, we do not obtain personal data from third parties (such as information from public sources, trust databases and credit agencies). We may also obtain your personal data from third parties for marketing purposes if you have explicitly consented to this.

In this case, we will inform you in accordance with applicable law.

We maintain physical, electronic and procedural safeguards in accordance with stateof-the-art technology and legal data protection requirements to protect your personal data from unauthorized access or intrusion. These safeguards include the implementation of specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will always strictly
comply with applicable laws and regulations regarding the confidentiality and security of personal data.

Who do we share your personal data with?

With affiliates of the ZONIX Group worldwide, as permitted by law. In such cases,these entities will use the personal data for the same purposes and under the same conditions as outlined in this Data Privacy Statement. Please click here for a list of ZONIX affiliates and their contact details.

We may also instruct service providers (so-called data processors), such as shared service centers, within or outside the ZONIX, domestic or foreign, to process personal data on our behalf and solely in accordance with our instructions for the Permitted Purposes. ZONIX will retain control and full responsibility for your
personal data and will use appropriate safeguards, as required by applicable law, to ensure the integrity and security of your personal data when engaging such service providers.

To courts, law enforcement agencies, regulators or attorneys, if permitted by law and necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.

Otherwise, we will only disclose your personal data if you have instructed or given us permission, if we are required to do so by applicable law or regulation or by a judicial or official request, or if we suspect fraud or criminal activity.

Who do we share your personal data with?

ZONIX is a global business. In the course of our business activities, we may also transfer your personal data to recipients in countries outside the European Economic Area (“third countries”) where applicable laws do not provide the same level of data protection as your own laws.

When doing so, we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data, in particular by entering into the EU Standard Contractual Clauses available here. If you would like more information about such safeguards, you can contact us at any time using the contact details below.

Your data protection rights

Subject to certain legal conditions, you can request access to, correction, deletion or restriction of processing of your personal data. You can also object to processing or request data portability. In particular, you have the right to request a copy of the personal data we hold about you. If you make this request repeatedly, we may charge an appropriate fee. For more information on your data protection rights, please refer to Articles 15-22 of the EU General Data Protection Regulation.

For any of the above requests, please send a description of the personal data in question to the contact details below, and include your name, customer number or other BONATECH identification number (if applicable) as proof of identity. We may require additional proof of identity to protect your personal data from unauthorized
access. We will consider your request carefully and may discuss with you how best to comply with your request.

If you have given us consent to process your personal data, you may withdraw that consent at any time with future effect, i.e. the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. If consent is withdrawn, we may only further process personal data where there is another lawful
basis for doing so.

If you have any concerns about how we process your personal data or wish to make a complaint, you can contact us using the contact details below so that we can investigate the matter. If you are not satisfied with our response or believe that our processing of your personal data is not in compliance with the law, you can complain to the competent data protection supervisory authority in your country

Do you need to provide personal information?

As a general rule, you will provide us with your personal data entirely on a voluntary basis; if you choose not to consent or not to provide personal data, there will generally be no adverse consequences for you. However, there are cases where ZONIX cannot act without certain personal data from you, for example, because such personal data is required to process your order, provide you with access to web products or newsletters, or to conduct compliance checks required by law. In these cases. ZONIX will unfortunately not be able to provide you with the content you have requested without the relevant personal data.

Retention of your personal data

Your personal data will be deleted when it is no longer reasonably necessary for the Permitted Purposes or you withdraw your consent (if applicable) and we are no longer legally required or permitted to continue storing such data. We will retain your personal data in particular to allow ZONIX to assert or defend against legal claims until the end of the relevant retention period or the relevant claim has been settled.

Social bookmarking in our online offers

Our website contains so-called “social bookmarks” (e.g. from YouTube, LinkedIn,Facebook and/or Twitter). Social bookmarks are Internet bookmarks that allow users of such services to collect links and news. These bookmarks are integrated into our website solely as links to the relevant services. After clicking on the integrated graphic,you will be redirected to the page of the relevant provider, which means that no user information is transmitted to the relevant provider before then. For information on the processing of your personal data when using these websites, please refer to the respective data protection policies of the providers.

Chatbots

You can use chatbots on our website to communicate your questions. These programs use artificial intelligence to classify your questions in ordinary chats in order to forward them to our responsible employees and help you find the content of our website.

If you have given your prior consent, we will process the personal data provided in these chats in order to answer your inquiry and contact you for advertising purposes.

The communication is carried out by our group companies, which offer the products and services you requested in your respective region. It is limited to the communication channel for which you provided your contact data and the group of products and services you requested. Providing your personal data is voluntary. You are not obliged to provide us with your personal data, nor is the provision of personal data necessary for the fulfillment of legal or contractual obligations or for the conclusion of a contract.

If you do not provide us with your data, this will not have any effects on you, except that we will not be able to answer your inquiry. You can withdraw your consent at any time with future effect, for example by contacting us without any specific form. After withdrawing your consent, your personal data will be deleted.

Google Analytics

We use Google Analytics, a web analytics service of Google Inc. Google Analytics uses cookies to enable usage analysis of our website portal. We use Google Analytics to continuously optimize the design of our pages and applications to meet the needs of our users.

If you agree, we will also use the data for analysis (scoring) in our CRM
system to calculate probability values based on scientifically recognized mathematical and statistical methods, with the aim of helping to prove the possible existence of a contractual relationship with a company. This data helps in decision-making in product
transactions, etc. and is incorporated into our risk management.

Data processing instructions The following data is collected during your visit to the website:

Browser type/version.

Operating system used.

Referrer URL (webpage that directed you to our website).

Hostname of the accessing terminal device (IP address, advertising ID).

Server request time.

We use Google Analytics only in conjunction with the “IP anonymization” function (IPmasking) activated by Google. This means that for users in Member States of the European Union or in other contracting states to the Agreement on the European Economic Area, Google truncates the user’s IP address. Only in exceptional cases (e.g. in the event of technical failures in the EU) is the IP address sent to a server in the United States and truncates there.

The “IP address anonymization” function used by Google does not write IP addresses to disk, as pseudonymization is performed in the main memory immediately upon request.

We do not receive any personal data from Google, only anonymous statistical information.

Legal basis for data processing

We process your personal data together with Google Analytics only with your explicit consent. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of personal data processed based on your consent up to that point. You can withdraw your consent at any time by sending an email to the contact person listed below.

Retention/deletion period

We store the data collected by Google Analytics in pseudonymous profiles, which cannot be associated with any individual for 14 months, in order to prevent misuse and to optimize our website. These data are automatically deleted after 14 months.

Transfer of data to third parties

Personal data collected through the Google Analytics tool will be shared with Google Ireland Limited.

Updates to this Data Protection Statement

This Data Privacy Statement was last updated in November 2024. We reserve the right to update and change this Data Protection Statement at any time to reflect changes in the way we use your personal data or changing legal requirements. If there are any such changes, we will publish the changed Data Protection Statement on our website.

How to contact us?

This Data Privacy Statement was last updated in November 2024. We reserve the right to update and change this Data Protection Statement at any time to reflect changes in the way we use your personal data or changing legal requirements. If there are any such changes, we will publish the changed Data Protection Statement on our website.

This data privacy statement was last updated in June 2026. We reserve the right to update and change this data protection statement at any time to reflect changes in how we use your personal data or legal requirements. If there are any such changes, we will post the revised data protection statement on the website.

For any questions or comments, or to exercise your rights, please click here.

You can also contact us by email:

ZONIX Data Protection Officer

Eric-tian

Eric-tian@uniwin3d.com