Data protection

5 Social Plugins and Social Media

At PERI, we enhance our services through the integration of social plugins, such as social media icons and “Like” buttons, from various social networks. These plugins are specifically designed to promote user interaction and engagement and to ensure seamless integration with popular social media platforms. It is important to note that these plugins are disabled by default and are only activated once you explicitly choose to enable them. This ensures that you retain full control over how your data are shared.

We strongly recommend that you first familiarize yourself with the data processing practices of these platforms before activating the social plugins. This proactive approach ensures that you are well informed about how these platforms use your data.

Once the plugins are activated, data transmission may occur, including details about your website visit, browser information, and other relevant metadata. If you also interact with our social media accounts via these platforms, similar data processing activities may occur.

Please note that PERI has no influence over the functional mechanisms of these social plugins, the data collection carried out by the social media platforms, or their subsequent processing and use of such data.

For detailed information about the data usage policies of the respective social media providers, we recommend consulting the following privacy policies:

Privacy policies of the respective social media platforms

​

Facebook (Meta):
https://www.facebook.com/privacy/policy/

LinkedIn:
https://www.linkedin.com/legal/privacy-policy

Instagram:
https://privacycenter.instagram.com/policy

YouTube:
https://policies.google.com/privacy?hl=en

​

6 Data Disclosure and Transfers

Disclosure to Service Providers

We work with internal group service providers and external service providers, including payment service providers, IT support providers (including various IT services such as digital workplace solutions, ERP systems, and AI services for administrative support, e.g., translation), customer service agencies, warehouse service providers, marketing agencies, campaign organizers, and repair companies, in order to provide you with the best possible and seamless services.

These service providers only have access to your personal data to the extent necessary to fulfill their contractual obligations towards us. Our service providers have been carefully selected and commissioned and are contractually bound. They will not process your personal data for other purposes.

We may disclose your personal data to our parent company and any subsidiaries or affiliated companies of our parent company.

​

We may disclose your personal data to our contractors and service providers pursuant to a written contract between us and each contractor or service provider. Each service provider is a for-profit entity that processes the data on our behalf.

We may use your personal data for our own business purposes, such as internal research for technological development and demonstration. This will not be considered a “sale” of your personal data.

Disclosure to Third Parties

​

We only disclose your personal data to third parties when this is necessary to provide the services requested by you.

For example:

• Your contact and company information may be shared with logistics service providers or product manufacturers to deliver or collect equipment and products.

• Your transaction information may be securely shared with payment service providers, banks, or other financial institutions to process payments and credits.

• Your event participation information may be shared with transport or hospitality service providers to facilitate your travel arrangements.
   

Subject to prior coordination with you, we may also register your contact and company information in order to invite you to participate in customer, industry, or supplier networks.

Your contact and company information and other insurance-related documents may also be shared with insurers or brokers for the purpose of processing insurance claims and reimbursements.

Internal PERI Group Transfers

In cases where a local business contact is required at your request or due to your expressed interest, your contact and company information may be shared with the respective PERI Group company in your country in order to best handle your request or interest.

​

This may also include scenarios where a PERI Group company sells products or services on behalf of another PERI Group company. In such cases, your contact and company information, user account information, and transaction information may be shared with the relevant PERI Group company for purposes such as order processing, license registration, or service activation.

​

Legal or Regulatory Disclosures

PERI may disclose your personal data in order to comply with applicable laws and regulations, respond to requests from supervisory authorities, courts, or governmental authorities, or to establish, exercise, or defend legal claims.

​

Cross-Border Transfers

Your personal data may be transferred to jurisdictions outside the area defined by local data protection laws, which are considered “cross-border transfers.” This may include transfers outside the European Economic Area (EEA) within the scope of EU law or outside the territorial boundaries of other countries under their respective data protection laws.

Such transfers will only take place:

• when necessary or legally required,

• when you have explicitly consented, and/or

• in connection with our contractual obligations towards you.
   

We have implemented appropriate safeguards for such transfers, including transfers to countries recognized as providing an adequate level of data protection, the use of data processing or data transfer agreements based on standard contractual clauses, and other equivalent safeguards recognized or required under applicable law to ensure an adequate level of data protection.

​

7 Data Security

PERI is committed to protecting your personal data and implements all necessary technical and organizational measures to ensure an appropriate level of protection. Our employees and service providers are contractually obliged to maintain confidentiality and comply with applicable data protection laws.

In particular, we implement appropriate safeguards to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure.

These measures include, among others:

Administrative measures, such as internal data protection policies and regular employee training;

Technical measures, such as access controls and authorization management, encryption of personal data, secure logging, antivirus software, and other IT security programs;

Physical measures, such as access restrictions to IT systems, server rooms, and data archives.

Our security measures are continuously improved in accordance with the state of the art.

​

8 Data Retention and Deletion

We do not retain your personal data longer than necessary to provide our goods and services, fulfill the purposes set out in this Privacy Notice, and comply with legal obligations.

Unless exceptions arise due to unforeseen dispute resolution or legal claims, we adhere to the following specific retention periods, which are regularly reviewed to ensure continued compliance and relevance:

​

Contact and company information:
These data are processed for the execution and documentation of the partnership and are retained after the end of the partnership for the duration of applicable commercial retention and documentation obligations.

Transaction information:
Your transaction information is retained in accordance with accounting and tax laws as well as our internal group accounting requirements.

​

User account information:
Your user account information will be removed no later than 13 months after the end of your use of our service. Information processed for logging and security monitoring purposes is retained only as long as necessary for system operation and securely deleted when the system is decommissioned.

​

Website usage and technical data:
These data are primarily processed during your visits to our websites or services. For further details on the retention and storage of these data through cookies and similar technologies, please refer to Section 4.

​

Personal image:
Your personal image processed with your consent is retained in accordance with the conditions set out in the consent declaration, fully taking into account legal requirements regarding personality rights and copyright law. Event recordings, such as photos or videos taken during your participation in events (where we make best efforts to avoid making individual persons identifiable), are processed and stored in accordance with the rotation concept for marketing materials and the information communicated in our on-site notices.

​

Social media information:
Social media posts and interactions are processed in accordance with the terms of the respective social media platform. Further information about the privacy policies of these platforms can be found in Section 5.

​

Event participation information:
Your event participation information will be deleted once it is no longer required for event follow-up activities and no legal retention or limitation periods apply.

​

9 Data Subject Rights

If you wish to exercise your data subject rights, you may contact us at any time using the contact details provided in Section 1 of this Notice.

You have the following rights regarding your personal data:

​

Right of access:
You may request confirmation as to whether personal data concerning you are being processed and, if applicable, obtain a copy of such personal data.

​

Right to data portability:
You may request the personal data you have provided to us in a machine-readable format, subject to applicable legal conditions.

​

Right to erasure (“right to be forgotten”):
You may request the deletion of your personal data under the conditions permitted by law.

​

Right to rectification:
You may request the correction of inaccurate personal data and the completion of incomplete personal data.

​

Withdrawal of consent:
You may withdraw any consent you have given for the processing of your personal data at any time without affecting the lawfulness of processing based on consent before its withdrawal.

​

Right to object:
You may object to the processing of your personal data under the conditions permitted by law.

​

Right to restriction of processing:
You may request the restriction of the processing of your personal data under the conditions permitted by law.

​

Right not to be subject to automated decision-making:
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. Please note that our current practices do not involve such automated decision-making; should this change, you will retain this right and will be properly informed of such processing.

​

Right to lodge a complaint:
You have the right to lodge a complaint with your competent data protection supervisory authority or with the supervisory authority responsible for PERI’s registered office.

​

10 Changes to this Notice

We reserve the right to amend this Privacy Notice as necessary in order to adapt it to operational, technical, and legal changes. If material changes are made that significantly affect the processing of your personal data, we will inform you either individually or by publishing an updated notice on this website.

Previous versions of this Privacy Notice may be obtained by contacting us using the contact details provided in Section 1 of this Privacy Notice.

Last updated: March 16, 2026

​​​​​​