Privacy policy

This privacy policy applies to the website you are currently visiting as well as to all other websites of our company and to our social media presence and other platforms.

  1. Responsible body

Responsible for the collection, processing and use of your personal data via this Internet platform is

CM Instrumente GmbH

Gerhard Zepf

Gänsäcker 56


Phone: +49 (0) 7462 | 94 61 0


The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

The responsible party is also the service provider in the sense of the Telemedia Act (TMG). You can reach the data protection officer

Mr. Erich Zimmermannper

Mail under

Postal address of the data protection officer:

Erich Zimmermann c/o ZiDa Data Protection GmbH, Waldhofer Str. 102,

69123 Heidelberg

Website of the data protection officer:

We take the privacy of visitors to this website and other of our company websites very seriously. We collect, process and use personal data only in accordance with the legal provisions and in accordance with this privacy policy.

Please read this privacy policy carefully. It informs you about the scope, type and purpose of the collection, use and processing of personal data of persons who use this website.

Personal data are all data with which you can be personally identified. These individual details include your name or your contact details, such as telephone number, address and email address.

With the exception of the IP address, personal data is only collected by us if you provide this information voluntarily, for example when registering on our website or using our contact form. This personal data is used to identify you as a user via your e-mail address and to contact you via this.

  1. What data do we collect on our website?
  2. Access data and log files

When using our website for informational purposes only, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • IP address (if possible, it will be stored anonymously)
  • Domain name of the website you came from
  • Names of the retrieved files
  • Amount of sent data in bytes
  • Date and time of a retrieval
  • Name of your Internet Service Provider
  • as well as operating system and browser version of your end device, if applicable

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. We process these data, but we do not store them permanently. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use. The data will be evaluated exclusively for statistical purposes. We do not create personal user profiles.

  1. Cookies

Cookies are used on our website to enable you to use certain functions and to make your visit to our website as practical and safe as possible. A cookie is a text file that is created when a website is visited and is temporarily stored on the system of the user of the website. If the server of our website is called up again by the user of the website, the browser of the user of the website sends the cookie previously received back to the server. The server can evaluate the information obtained through this procedure. Cookies can be used, for example, to control the display of advertisements or to facilitate navigation on a website. Cookies are  required in particular to enable the functionality of our website operation (the legal basis is Art. 6 para. 1 letter f DSGVO, the protection of the legitimate interests of the operator of this website – we use cookies only in agreement with Art. 5 para. 1 letter a DSGVO, i.e. in accordance with the principles of legality, processing in good faith, transparency). Unless the cookies are technically necessary (which are kept purely locally and are not analyzed further), you will be asked for permission to set the cookies. The use of cookies serves our predominantly legitimate interest in an optimized presentation of our offer in accordance with Art. 6 Para.  1 lit. f DSGVO. We only use cookies in agreement with Art. 5 Para. 1 lit. a DSGVO, i.e. according to the principles of “legality, processing in good faith, transparency”.

If you wish to prevent the use of cookies, you can do so by means of local setti ngs in your Internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari). There you can deactivate the setting of cookies in  general and delete already stored cookies. In some cases, however, individual functions of our website may no longer be fully usable.

  1. Hosting of the website

As part of a processing operation on our behalf, a third party provider located within a country of the European Union provides us with hosting and display services for the Website and provides infrastructure services, computing capacity, storage space and database services, maintenance services and security services. In doing so, we or our hosting provider process all data that is generated in the course of using our website. This includes inventory data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of our online offer. The processing is based on our legitimate interest in an efficient and secure provision of this online offer (Art. 6 para. 1 lit. f DSGVO in connection with Art. 28 DSGVO).

  1. What data do we collect and use when we contact you?

We process inventory data (e.g. names, addresses and contact data), which you have provided us with in the course of contacting us (e.g. by contact form, by e-mail or by telephone), in order to fulfil contractual obligations or to answer your inquiries in accordance with Art. 6 Para. 1 letter b DSGVO. Which data is collected can be seen from the respective input forms. Information that is absolutely necessary to process your inquiry is marked as mandatory fields. For inquiries via our website, we store the IP address and the time of the respective user action. This is done on the basis of our legitimate interests, as well as the  interests of the users in protection against misuse and unauthorized use of their data. You can object to this at any time (right of withdrawal). We will not pass on this data to third parties unless this is necessary to pursue our claims or if there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO. We delete the data arising in this context after storage is no longer required or restrict processing if there are legal storage obligations. We review the necessity of data storage every two years.

III How long do we store your data?

The data processed by us are processed, deleted or their processing is restricted in accordance with Art. 17 and Art. 18 DSGVO. We store your personal data, which is generated when you use our website, in principle only as long as this is necessary for the abovementioned purposes. However, if the deletion is contrary to legal storage obligations, the processing of the data is only restricted, i.e. it is blocked for further use and cannot be processed for other purposes.The following obligations of proof and retention are particularly relevant: 6 years according to § 57 para. 1 HGB (for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.), 10 years according to § 147 para. 1 AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). In addition, personal data may be retained for the time during which claims can be asserted against us (statutory limitation period of three or up to thirty years).

What do we process your data for (purpose of processing) and on what legal basis?

We process the data resulting from the visit to our website or the use of the offered contact possibilities in accordance with the provisions of the European Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG). There are different legal bases depending on the matter for which you contact us via the website. The specific legal basis for data processing depends on the context and purpose for which we receive your data. As a rule, the legal basis for data processing is derived from the options listed below:

Art. 6 I lit. a DSGVO serves us as a legal basis for processing operations for which we obtain consent for a specific processing purpose. Any consent granted can be revoked at any time. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the supply of goods or provision of another service or consideration, the processing is based on Art. 6 I lit. b DPA. The same shall apply to such processing operations which are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our products or services. If we are subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c DSGVO. Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations which are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail.

Passing on your personal data to third parties?

IP addresses are automatically transmitted to the server where the website is operated when you visit a website. A transfer of these IP addresses to third parties is inevitable whenever a third party component (a script, an image, a font, or any other digital resource) is embedded on the website. Which components are integrated on this website is listed in this privacy policy. The recipients of your IP address or categories of recipients can also be derived from this. Otherwise, we will only use your personal data for the fulfilment of the contract. In doing so, we observe the principles of purpose limitation and data minimization. Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

  • you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
  • this is legally permissible and, in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, necessary for the processing of contractual relationships with you.

Is there an obligation for me to provide data?

Within the scope of our business relationship, you only need to provide us with those personal data that are necessary for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or be unable to execute an existing contract and may have to terminate it.

VII. What data protection rights do I have?

You have the right:

  • to request information about your personal data processed by me in accordance with Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected from me, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the same;
  • in accordance with Art. 16 DSGVO to immediately request the correction of incorrect or incomplete personal data stored by me;
  • in accordance with Art. 17 DSGVO to demand the deletion of your personal data stored with me, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 DSGVO
  • in accordance with Art. 20 DSGVO to receive your personal data that you have provided me in a structured, common and machine-readable format or to request its transmission to another responsible party;
  • in accordance with Art. 7 Para. 3 DSGVO to revoke your once given consent to me at any time. As a consequence, we are not allowed to continue the data processing based on this consent in the future and
  • pursuant to Art. 77 DSGVO, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority at your usual place of residence or work or the place of the place where the alleged breach occurred if the data subject believes that the processing of personal data relating to him or her is in breach of the EU’s basic data protection regulation (DS-GVO).

Right of objection

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1, sentence 1, letter f) DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a special situation. If you wish to exercise your right of revocation or objection, an e-mail to the e-mail address given in the imprint of our website is sufficient.


A given consent can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the Data Protection Basic Regulation came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

VIII. What should be considered with links to other websites?

Our website/app may from time to time contain links to third party websites or to other websites of our own. If you follow a link to one of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please review this privacy policy before you provide any personal information to these websites.

What do we do for data security?

We use the TLS (Transport Layer Security) method in conjunction with the highest encryption level supported by your browser. The closed key or lock symbol in the status bar of your browser indicates whether an individual page of our website is being transmitted in encrypted form. We secure our website and other IT systems by appropriate technical and organizational measures against loss, destruction, unauthorized access, unauthorized modification or unauthorized distribution of your data. However, a complete protection against all dangers is practically not possible in every case, despite all due care.

Changes to this Privacy Policy

We reserve the right to change this privacy policy if the legal situation or this online offer or the way data is collected changes. However, this only applies to statements on data processing. If the consent of the user is required or if parts of the data protection declaration contain a regulation of the contractual relationship with users, the data protection declaration will only be changed with the consent of the user.Therefore, please inform yourself about this privacy policy if necessary, especially if you provide personal data.

Explanation of tools and aids used

It is often not enough to explain how to use a tool. Please refer to the notes at the verybeginning of the document. Please also design the texts according to the tools you use. Copying the entire following text is not helpful.

Analysis tools and advertising

Google Analytics

We use the analysis service Google Analytics. This web analysis service is operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use Google Analytics to evaluate your use of our website and to compile reports on user activity. This analysis tool works in particular on the basis of cookies. A cookie is a text file that is sent when you visit a website and is temporarily stored on the hard disk of the user of the website to enable an analysis of your use of the website. The information stored by the cookie is usually transferred to a Google server in the USA and then stored there. Within the scope of IP anonymization, your IP address is previously shortened by Google within a member state of the EU or another signatory state to the Agreement on the European Economic Area. On our behalf, Google will use the transmitted information to create a report on the use of the website. We have concluded a contract with Google for order processing. If you wish to prevent the use of cookies, you can do so by locally changing your settings in the Internet browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox etc.), i.e. the program for opening and displaying Internet pages. Furthermore, you can prevent the collection and processing of your data by the Google cookie by downloading and installing a browser plugin offered by Google under the following


You can prevent the collection by Google Analytics by using the consent solution used on this website. Further information on the terms of use and data protection of Google and Google Analytics

can be found at and

We would like to point out that Google Analytics has been extended by the extension “anonymizeIp”. This ensures anonymous collection of IP addresses. Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.

Social media

YouTube videos

We have embedded YouTube videos on our website, which are stored on the servers of the provider YouTube and can be played from our website via embedding. The embedding of the videos is done with the option for advanced privacy settings activated. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and may transfer data to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as YouTube operator.

When playing videos stored on YouTube, at least the following data is currently transmitted to Google as YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page called up on our site, system date and time of the call, identification of your browser.

This data is transmitted regardless of whether you have a Google user account through which you are logged in or whether you do not have a user account. If you are so logged in, Google may associate this data directly with your account. If you do not wish to be associated with your profile, you must log out before activating the play button for the video.

YouTube and Google respectively store this data as user profiles and may use it for advertising, market research and/or the design of their websites to meet your needs. Such evaluation is carried out in particular (also for non-registered users) to provide advertising tailored to your needs and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google as operator of YouTube in order to exercise this right.

Further information on the purpose and scope of data collection and processing by Google can be found on this information page. Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.



We use WordPress as editorial system for our website. WordPress uses functional (necessary) cookies to ensure the login process for editors and administrators. In particular, when trying to log in to the WordPress administration interface, a cookie called wordpress_test_cookie is set. This cookie is only used for the active session and is deleted when you close the browser. The cookie is not used to evaluate users.

Other Tools

Google reCAPTCHA

The reCAPTCHA component of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is used to protect your communication via Internet forms. With reCAPTCHA, misuse through  automated, machine processing can be reduced.

reCAPTCHA transmits your IP address and any other data required by Google for reCAPTCHA to Google.Your input via the reCAPTCHA component will be transmitted to Google and further processed there. By using reCAPTCHA, you agree that the recognition of images provided by you will be incorporated into the digitization of old works. The IP address transmitted by your browser when using reCAPTCHA will not be merged with other data from Google. For these data the deviating data protection regulations of Google apply. Further information about Google’s privacy policy can be found here:

Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.

Google Fonts

This site uses certain fonts from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) for display. When you call up a page, your browser loads these fonts. Your IP address including the page (internet address) you visited is transferred to a Google server. For more information about Google Fonts, please visit and read the Google Privacy Policy at

Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.

Google Maps

This website uses the Google Maps map software from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By using this website, you consent to the collection, processing and use of data that may be collected automatically by Google and its agents. Terms of use of Google Maps. Additional information can be found in the Google Privacy Policy. Google Maps reloads Google fonts to display the map correctly. The Google fonts are also loaded from a Google server. You can find more information about these Google fonts at Please note that due to the Cloud Act, U.S. intelligence agencies could potentially gain access to personal information that is necessarily exchanged with Google, whose headquarters are located in the U.S., due to the Internet Protocol when this tool is integrated.

Own services

Handling of applicant data

We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post or via online application form). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with the applicable data protection laws and all other legal requirements and that your data will be treated in strict confidence.

Scope and purpose of data collection

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) to the extent that this is necessary to make a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. Consent can be revoked at any time. Within our company, your personal data will only be passed on to persons involved in the processing of your application. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 para. 1 lit. b DSGVO for the purpose of the employment relationship.

Data retention period

If we are unable to offer you a job, if you reject a job offer or if we withdraw your application, we reserve the right to keep the data you have submitted with us for up to 6 months from the end of the application  procedure (rejection or withdrawal of the application) on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO). The data is then deleted and the physical application documents destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period (e.g. due to an imminent or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies. A longer storage period can also take place if you have given your consent (Art. 6 para. 1 lit.a DSGVO) or if legal storage obligations prevent deletion.

Admission to the applicant pool

If we do not offer you a job, there may be the possibility to add you to our pool of applicants. If you are accepted, all documents and details from your application will be transferred to the applicant pool in order to contact you in case of suitable vacancies. Admission to the applicant pool is based solely on your express consent (Art. 6 para. 1 lit. a DSGVO). Your consent is voluntary and has no relation to the ongoing application procedure. The person concerned can revoke his/her consent at any time. In this case, the data will be irrevocably deleted from the pool of applicants, unless there are legal reasons for retention. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

SIMIS Seal of Quality

We use the data protection quality seal of SiMiS – Sicherheit mit System –

GmbH Schwarzwaldstr. 17, 68163 Mannheim, Germany (“SiMiS”) in the form of an integrated image. If the image is loaded from a SiMiS server, there is an agreement with SiMiS that the data necessarily collected when the image is retrieved via the Internet protocol will not be used for analysis. As the operator of the website, we ourselves are responsible for compliance with the data protection information provided to us by SiMiS in the form of a data protection report. The SiMiS privacy policy can be found here:

This privacy policy was created with the kind support of SiMiS(Security with System).

2018 © CM Instrumente GmbH. Alle Rechte vorbehalten.
Design & Umsetzung: Squadhouse Media