Hexagon Manufacturing Intelligence Division Privacy Notice

Privacy Notice (Previously referred to as Privacy Statement)

Hexagon Manufacturing Intelligence, (“we” or “us” or “our”) respects your privacy. This privacy notice explains how we collect, store, use, disclose, retain and transfer (“process”) your personal data and inform you about your rights. The personal data that we process about you depends on the context of your interactions with us, the products, services and features that you use, and your location.

We are committed to the safe and secure processing of personal data and compliance with applicable data protection laws. We have implemented appropriate physical, technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, use, alteration and unauthorized disclosure or access. The number of persons with access to your personal data is limited. Only individuals associated with us that need to process your personal data in accordance with the purposes below will have access to your personal data.

The data we collect about you

Personal data means any information directly or indirectly relating to an identified or identifiable individual.

We may process different kinds of personal data about you as follows:

  • Identity Data includes first name, maiden name, last name, username or similar identifier, title, date of birth, gender, video, audio and photographic data. 
  • Contact Data contact details includes, full name, job position, place of work, address, fax number, email address and telephone and mobile phone numbers.
  • Financial Data includes bank account and payment card details.
  • Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, network and device identification and other technology on the devices you use to access our website or products or services.
  • Profile Data includes biographical information about you, which may include details of your social media presence, your job title/role, purchases or orders made by you, your education degrees, previous professional experiences skills, and other relevant information you provide to us on our recruitment channels, your interests, preferences, feedback and survey responses. 
  • Usage Data includes information about how you use our website, products and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

The legal basis for processing your personal data

There are various legal bases upon which we may rely, depending on what personal data we process and why. The legal bases we rely on are:

  • Consent: Where you have given us clear and explicit consent for us to process your personal data for a specific purpose.
  • Contract: Where our use of your personal data is necessary for a contract we are about to enter into or have entered into with you, or because you have asked us to take specific steps before entering into a contract, or to exercise our rights and perform our obligations under any contract with you.
  • Legitimate interest: Where our use of your personal data is necessary for us to fulfil a legitimate business purpose or the legitimate business purpose of a third party after balancing them with your rights and freedoms (unless there is a good reason to protect your personal data, which overrides our legitimate interest).
  • Legal obligation: Where our use of your personal data is necessary for us to comply with the law (not including contractual obligations).

We use different methods to collect data from and about you including through: 

Direct interactions. You may give us your Identity, Contact, Financial, Profile, Marketing and Communications Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when, amongst other things, you visit one of our offices, attend our events, apply for a job position, apply for our products or services, use or subscribe to our products or services, request marketing information from us, fill in forms in the context of marketing and customer surveys, furnish our representatives with your business card, ask for assistance or technical support, give us feedback or contact us.

Automated technologies or interactions. As you interact with our websites or products or services, we may automatically collect Contact, Usage and Technical Data. We collect this information by using cookies and other technologies such as anti-piracy and licence compliance software. We utilize the One Trust cookie manager to automate the management of cookies and allow you to control which cookies are placed on your device. The legal basis for processing your personal data is your consent given through the One Trust cookie manager.

To learn more about cookies we use, for which purposes they are used and to view or change your current preferences with respect to the use of cookies on our websites, please activate the Cookie Preferences pop-up.

To learn more about cookies we use, for which purposes they are used and to view or change your relevant preferences, please review your Cookie Preferences. 

Third parties or publicly available sources. We may obtain personal data about you from various third parties as set out below: 

  • Technical Data: from analytical providers.
  • Contact, Financial and Transaction Data: from providers of technical and payment services.
  • Identity and Contact Data: from data brokers or aggregators.
  • Identity and Contact Data: from publicly available sources.

You may also interact with us on the following social media platforms: Facebook, Instagram, LinkedIn, Twitter, Xing and YouTube. The applicable social media platform provider is solely responsible for the processing of your personal data when you visit our company page on the social media platform. To learn more about the processing of your personal data by the social media platform providers please read their respective data privacy statements. Although we obtain only anonymous data, Facebook and LinkedIn provide us with the anonymous statistics and insights about the visitors to our company pages on their platforms and we take part in these processing by defining the relevant parameters.  This processing serves our legitimate interest of analyzing the types of actions carried out on our page and improving our page based on these findings. We entered into agreements with Facebook and LinkedIn on processing as joint controllers for creating these statistics and insights. For more information, please read the joint controller agreements:

LinkedIn Joint Controller Addendum

Facebook Joint Controller Addendum

We may rely on one or more of the sources of personal data described above. 

How we process your personal data

Contractual obligations:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Financial Data
  • Transaction Data
  • Technical Data
  • Marketing and Communications Data

The purposes of the processing

Fulfilling our contractual obligations towards you or your company, e.g., register you as a new customer, sending quotes, order administration, provision of products and services to or from your company, invoicing your company or paying a company’s invoice, notifying you of changes to our terms, responding to your service requests, holding meetings at our offices etc.

Legal basis for the processing
  • Contract
  • Legitimate Interest

Recipients (or categories of recipients) of the personal data

We will share your personal data with companies within the Hexagon Group.

We will also share your personal data with suppliers and business partners and legal agents which carry out services on our behalf such as customer relationship management solution providers.

Retention period

We will retain your data for as long as the business relationship with your company exists.

We will retain and use your data during the applicable statutory limitation periods and as necessary to comply with our legal obligations, resolve disputes and to enforce agreements.

Marketing:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Transaction Data
  • Technical Data
  • Profile Data
  • Usage Data
  • Marketing and Communications Data

The purposes of the processing

To inform inform you via any means (including via email, telephone, text message, social media or in person) about our products, services, publications and events which we think may be of interest to you and your company, based on previous purchases and interest shown in our products.

Legal basis for the processing
  • Consent
  • Legitimate Interest

Recipients (or categories of recipients) of the personal data

We will share your personal data with companies within the Hexagon Group.

We will also share your personal data with suppliers and business partners and legal agents that carry out services on our behalf such as marketing solution providers.

Retention period

We will process your personal data unless you opt out of the processing for direct marketing purposes, or unless you object to the processing and the objection overrides our Legitimate Interest.

 

Customer Testimonials, Comments and Reviews:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Technical Data
  • Profile Data
  • Marketing and Communications

The purposes of the processing

The processing is required for the purpose of carrying out customer satisfaction surveys to obtain feedback on how we can improve our products and services and obtaining customers testimonials, comments and reviews providing reviews to our client base in support or otherwise, of our products, services and software.

Legal basis for the processing
  • Consent
  • Legitimate Interest

Recipients (or categories of recipients) of the personal data

Individuals who access any marketing channel from either within Hexagon Manufacturing Intelligence or outside of Hexagon Manufacturing Intelligence.

Retention period

For as long as is necessary unless you withdraw your consent or object to the processing.

Recruitment:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Profile Data
  • Technical Data
  • Also, employment details, background information, and any other information in your application that you choose to share with us.

The purposes of the processing

To consider your application in respect of a role for which you have applied.

To consider your application in respect of other roles, including future job openings (unless you have told us that you do not want us to keep your information for such purposes).

To communicate with you in respect of the recruitment process.

To enhance any information that We receive from you with information obtained from third party data providers.

General HR administration and management (in case you become an employee).

Conducting satisfaction surveys.

Analysis and assessment of your application, including verification of employment reference(s) and background checks.

Compliance with corporate governance and legal requirements.

Legal basis for the processing
  • Contract
  • Consent
  • Legitimate Interest
  • Legal Obligation

Recipients (or categories of recipients) of the personal data

HR Teams, and other employees and third-party service providers involved in or supporting the recruitment process.

We may also disclose your personal information to other third parties as necessary to comply with Our legal obligations, or to establish, exercise or defend Our legal rights.

Retention period

We will retain the data in accordance with applicable statutory obligations, or for 6 months period notifying you of the expiration and giving you the choice to remain on our database.
Your personal data is not stored for longer period than 24 months. At any time you can request your data to be deleted.

 

To administer, improve and protect our business, websites, products and services:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Technical Data
  • Profile Data
  • Usage Data

The purposes of the processing

The processing is required for the purpose of improving our products and customer experiences, which includes troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data.

Legal basis for the processing
  • Legitimate Interest
  • Consent

Recipients (or categories of recipients) of the personal data

Individuals who access any Hexagon Manufacturing Intelligence marketing channel. Individuals who use our products.

Retention period

For as long as is necessary unless you object to the processing and the objection overrides our Legitimate Interest.

 

Anti-Piracy and Licence Compliance:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Technical Data
  • Transaction Data
  • Profile Data
  • Usage Data

The purposes of the processing

To verify user compliance with the terms of the applicable licence agreement, identify unauthorised use and users of software, and otherwise to protect and enforce intellectual property rights.

Legal basis for the processing
  • Legitimate Interest

Recipients (or categories of recipients) of the personal data

We may share your data with our affiliates, as well as our (and our affiliates') contractors (including channel partners), representatives, successors and assigns, in connection with our (and our affiliates') license compliance and anti-piracy efforts, such as sharing data with suppliers of anti-piracy technology, as well as law firms and other enforcement partners and service providers responsible for protecting and enforcing our intellectual property rights.

Retention period

For as long as necessary to verify licence compliance, identify unauthorised use and users of our software, and otherwise protect and enforce our intellectual property rights.

Legal Compliance:

Categories of personal data we process
  • Identity Data
  • Contact Data
  • Profile Data

The purposes of the processing

To carry out customer screening to enable us to meet our legal obligations only to provide products and services to those legally permitted to receive such products and services. To provide information to such authorities that require this in order that we can secure the necessary permissions to continue with our business operations.

Legal basis for the processing
  • Legitimate Interest
  • Legal Obligation

Recipients (or categories of recipients) of the personal data

We may share your data with those government authorities who require this information or third-party screening platforms.

Retention period

For as long as necessary to obtain the correct authorisations and perform delivery of the product or service.

 

**Where Hexagon Manufacturing Intelligence has sought your consent to the processing of your personal data then you can withdraw your consent at any time by contacting Email: privacy.mi@hexagon.com.

TRANSFER OF YOUR  PERSONAL DATA

Where we transfer, including making available, your personal data outside of your home country, the transfer will comply with the applicable laws.

For transfers from the European Economic Area: we will only transfer your data to the recipient that is either located in a country that offers an adequate level of data protection as determined by the European Commission or has entered into EU Standard Contractual Clauses with us after we have ensured through a data transfer impact assessment and/or implementation of supplementary measures that the recipient can comply with them.
 
For transfers from the UK: we will only transfer your data to the recipient that is either located in a country that offers an adequate level of data protection as determined by the UK adequacy regulations or has entered into International Data Transfer Addendum to the EU Standard Contractual Clauses with us after we have ensured through a data transfer impact assessment and/or implementation of supplementary measures that the recipient can comply with them.

FOR CALIFORNIA RESIDENTS ONLY 

The purpose of this section is to provide information to California residents pursuant to the California Consumer Protection Act (CCPA).   

Personal data also includes any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a “consumer” or “household” as defined herein. 

We do not and will not sell your personal data to third parties. 

What are your rights?

You are entitled to know what personal data we are processing about you. You have the right to request access to your personal data and you can request that we provide a copy of such data to you.  You are entitled to have incorrect personal data regarding you corrected, and in some cases, you may request that we delete your personal data. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data be limited. Limitation or deletion of your personal data may result in Hexagon Manufacturing Intelligence not being able to fulfil its commitments to you. You also have the right to request data portability, where your personal data would be extracted in a machine-readable format and transferred to another controller. Hexagon Manufacturing Intelligence may not always be obliged to comply with a request from you for deletion, restriction, objection or data portability. Additional circumstances such as exercising the right of freedom of expression and information, compliance with a legal obligation which requires processing for establishment, exercise or defence of legal claims can justify further processing by Hexagon Manufacturing Intelligence.  Hexagon Manufacturing Intelligence will assess the eligibility of your request and inform you about Hexagon Manufacturing Intelligence’s decision and reasoning.  Where you have given us your consent to process your personal data, you can withdraw your consent at any time and without justification. Where you withdraw your consent, certain personal data (only to the extent that it is absolutely required), will be retained on our “do not contact” list.

You may exercise your rights by emailing privacy.mi@hexagon.com.

Objections and complaints

We will support you with any data privacy related queries, concerns, comments, objections or complaints. In addition, you have the right to lodge a complaint with the relevant data protection supervisory authority, where the applicable laws provide for such remedy. The contact details of the data protection supervisory authorities within the European Economic Area are available here.

Identity of the Privacy Officer

The Hexagon Manufacturing Intelligence Privacy Officer can be contacted at: privacy.mi@hexagon.com

Identity of the controller

Reference to Hexagon Group means Hexagon AB, Swedish Company Registration Number 556190-4771, Lilla Bantorget 15, P.O. Box 3692, SE-103 59 Stockholm, Sweden (hexagon.com), its subsidiaries and controlled joint ventures are the joint controllers of your personal data. 

Hexagon Manufacturing Intelligence operates within a matrix/division structure and reference to it means Hexagon Metrology AB, its subsidiaries and controlled joint ventures. It follows that your location and your business relationship with Hexagon Manufacturing Intelligence are essential in determining the relevant controller(s) in terms of the processing of your personal data within the Hexagon Group.

The Hexagon Manufacturing Intelligence Privacy Officer will coordinate with the Privacy Officers of other Hexagon divisions led by the Group Privacy Officer, in order to guarantee your rights as a data subject.

The Hexagon Manufacturing Intelligence Privacy Officer can be contacted at privacy.mi@hexagon.com.  Upon your request to the Hexagon Manufacturing Intelligence Privacy Officer, you will be provided with full details of the relevant controller(s) within the Hexagon Group which is/are responsible for the processing of your personal data. Further, we will provide the name and the contact details of any Data Protection Officer, where appointed by the applicable controller.

This Privacy Notice was last amended on March 28 2024.