Privacy policy

The Lenze Group appreciates your interest in our products and our company. It is particularly important to us to ensure the highest possible level of protection for your personal data. We therefore wish to inform you about our commitment to protecting your privacy with this data protection statement.

The protection of your privacy is of crucial importance, especially for future Internet-based business and service models. With this data protection statement, we want to emphasise our commitment to protecting your privacy. 

We take the protection of your personal data very seriously and operate our systems in accordance with the relevant rules and laws on data protection and data security. If we involve external companies in the processing of your data, we ensure that our partners also comply with data protection regulations.

This privacy policy explains the nature, scope and purpose of the processing of personal data within the Lenze Group. It is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR).

The entity responsible for data processing in connection with our website is:

Lenze SE
Hans-Lenze-Straße 1
D-31855 Aerzen
+49 5154 82-0

The data protection officer can be contacted by email at dataprivacy@lenze.com
and by post at c/o Data Protection Officer, Lenze SE, Hans-Lenze-Straße 1, D-31855 Aerzen.

Unless otherwise specified, Lenze SE and the companies affiliated with Lenze SE within the meaning of Section 15 of the German Stock Corporation Act (AktG) are hereinafter referred to as ‘Lenze’ or ‘Lenze Group’.

Personal data

Personal data are all information relating to an identified or identifiable natural person (hereinafter referred to as "the person concerned"). Identifiable is a natural person who can be identified directly or indirectly, in particular by assigning it to an identifier such as a name, to an identification number, to an online identifier or address, etc.

Affected person

The person concerned is any identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing is any operation performed with or without the help of automated procedures or any such series of operations in connection with personal data such as the collection, recording, organization, arranging, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, deletion or destruction.

Consent

Consent shall be provided by the person concerned voluntarily for the particular case in an informed and unambiguous manner, in the form of a declaration or any other clearly affirming act with which the person concerned understand that you agree to the processing of the personal data relating to you.

Customer and Prospect Relationship Management

We will use personal data that you provide to us when contacting us as a customer or prospective customer (e.g. in person, at trade fairs, in surveys, by telephone, etc.) for the purposes of maintaining contact, providing information about products or the company, inviting you to events, etc.

Data processing is carried out on the basis of Art. 6 (1) (a) ‘Consent, e.g. receipt of advertising’, (b) ‘Contract processing’ and (f) ‘Legitimate interest in maintaining business relationships’ GDPR.

Customer Quote Request and Order Processing

Your personal data, which you provide to us in the context of requesting a quote, order processing, licence processing, configuration, etc., will be used to process the respective business transactions with you.

Data processing is carried out on the basis of Art. 6 (1) (b) ‘Contract processing’ and (f) ‘Legitimate interest in maintaining business relationships’ of the GDPR.

Supplier Management and Order Processing

Personal data that you provide to us in the course of processing enquiries, orders, etc. will be used to process the respective business transactions with you. 

Data processing is carried out on the basis of Art. 6(1)(b) ‘Contract processing’ and (f) ‘Legitimate interest in maintaining business relationships’ of the GDPR. 

Questionnaires

Lenze conducts surveys to assess the satisfaction of customers or interested parties with products, services or other offerings of the Lenze Group and to use the results for developing relationships with current or potential business partners.
When conducting surveys, we may use service providers such as Qualtrics, LLC, based in the USA. We have concluded contracts with service providers to ensure that data processing is conducted in a legally compliant and secure manner.

Data processing is carried out on the basis of Art. 6 (1) (f) ‘Legitimate interest in establishing and maintaining business relationships and the market-driven development of our own product and service portfolio’ GDPR.

Visitor management

We would like to inform you that parts of the Lenze Group have implemented processes for visitor or service provider management_

• The responsible company within the Lenze Group can provide you with additional information on the technology used, etc., if required.
• The management of visitors or service providers who are on our premises is carried out either analogously or digitally and serves primarily to keep track of all external persons who are on our premises at a specific time.
• To keep records that the required behaviour and safety instructions for visitors or service providers have been carried out.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f) ‘Legitimate interest in managing external persons who are on our premises and in providing evidence of safety instructions’ GDPR.

Video Surveillance

We would like to inform you that parts of our buildings or properties are under video surveillance. Local signs provide information about 

• The responsible company of the Lenze Group can provide you with additional information about the technology used, etc., if required.
• The video surveillance systems used serve to enforce our domiciliary rights and to protect our legal interests. 
• In exceptional cases, we use video surveillance systems to document projects or construction activities. In such cases, we will specifically inform you of any deviating storage procedures or times.

Data processing is carried out on the basis of Art. 6 (1) (f) ‘Legitimate interest in protecting our legal interests or documenting projects’ GDPR.

Your data will only be collected and processed for the purpose of filling positions within the Lenze Group. The responsible body for data collection in this sense is – in the case of an application for a specifically advertised position – the respective advertising company, whose address details can be found in the respective advertisement.
If you apply to the Lenze Group for a specific advertised position, your data will be automatically forwarded to the relevant HR managers. You can revoke this consent at any time with future effect by sending an email to the contact person named in the application.
If you submit a speculative application, your data will be automatically forwarded to the relevant HR managers in accordance with your skills. The purpose of this is always to enable the relevant managers to assess your potential.
As part of your application, we ensure that your data is automatically deleted from our systems after six months in the event of a negative decision, unless you have given us your consent to transfer this data to the applicant pool. We use 

Data processing is carried out on the basis of Art. 6 (1) (a) ‘Inclusion in applicant pools’ and (b) ‘Application as a pre-contractual measure’ GDPR.

Websites

We provide information about the products and services of the Lenze Group via this website. We offer you, the user, various functions that allow you to request additional data after registering or providing your contact details, or to interact with us in the relevant services.
We explain the various processing purposes in the respective functions/forms and process data relevant to us on the basis of the respective requirements. Data that you provide to us via this website will only be processed by the Lenze Group and will not be sold to third parties. 
As a matter of principle, we process log data within the scope of system operation to ensure system operation and to analyse errors or optimise the website or the connected services.

Data processing is carried out on the basis of Art. 6(1)(a) ‘Consent to the processing of data for contact or advertising purposes by companies of the Lenze Group’ and (f) ‘Operation of web services, maintenance of business relationships with existing or new partners, further development of the business activities of the Lenze Group’ GDPR.

Use of cookies

In order to process your preferences and control individual services, we use cookies on our website, which are stored as text files in the browser on the device you use to access this website. Session cookies are deleted from your device at the end of the browser session, while permanent cookies remain on your device and enable it to be recognised on your next visit. We inform you about the setting of specific cookies by means of a cookie banner or via information texts (if you have rejected certain services). By accepting or rejecting cookie processing, you decide whether you can use this website with limited functionality. We use Usercentrics GmbH as a service provider to support cookie management. 

This data processing is carried out in particular on the basis of the German § 5 DDG and Art. 6 para. 1 lit. f) ‘Legitimate interest in the operation and optimisation of the website’ GDPR.

Privacy settings

Link shortener

In order to link notes containing information provided via the Lenze Group’s web services to various services (e.g. online forms, documents, terms of use), we use so-called link shorteners to make the text easier to read. We use RadiateCapital Limited (Rebrandly) as a service provider to implement these functions. 

This data processing is carried out in particular on the basis of Article 6(1)(f) ‘Legitimate interest in providing simple links to information on the website’ of the GDPR.

Use of Content Delivery Networks (CDN)

Download files from the Application Knowledge Base and Technical Documentation sections of lenze.com are stored by Amazon Web Services Inc. (AWS), P.O. Box 81226, Seattle, WA 98108-1226, in its data centre in Frankfurt/Main and made available worldwide. Lenze has no influence on the type and scope of information that AWS collects, processes or uses when you use the download service. For further information, please refer to the AWS privacy policy.

This data processing is carried out on the basis of Art. 6 (1) (f) ‘Legitimate interest in the operation and high-performance provision of extensive data’ GDPR.

Use of the EASY Product Finder ("EPF") online store

We process your personal data in connection with enquiries and orders only within our company and affiliated companies, as well as with the company commissioned to process orders, solely for the purpose of executing and processing orders, including the associated payment transactions.
For reasons of IT and data security, and to ensure system stability, we store your account name, status and IP address for 30 days.

This data processing is carried out on the basis of Art. 6 (1) (a) ‘Consent to maintain contact’, (b) ‘Contractual and pre-contractual measures to initiate orders’ and (f) ‘Legitimate interest in operating and optimising the platform’ GDPR.

Provision of 2D / 3D CAD data

The CAD files in the EASY Product Finder section are stored by KiM GmbH, Tritschlerstrasse 1, D-66606 St. Wendel, in a German data centre and made available worldwide.
Lenze stores log data for every file generated and downloaded (e.g. CAD, PDF, pixel images) and for every direct insertion into CAD systems (CADClick® ‘Click2CAD’). This data is condensed and used in anonymised form to optimise the CAD service.

This data processing is carried out on the basis of Art. 6 (1) lit. f) ‘Legitimate interest in the provision and optimisation of technical data’ GDPR.

HubSpot

• Email marketing (newsletters and automated mailings, e.g. to provide downloads)
• Social media publishing & reporting
• Reporting (e.g. traffic sources, hits, etc.)
• Contact management (e.g. user segmentation & CRM)
• Landing pages and contact forms
• Chat function

Our registration service enables visitors to our website to learn more about our company, download content and provide their contact information and other demographic information.
We use your personal data collected as part of online marketing, in particular the areas of interest you have specified, to provide you with product and service offers tailored to your personal needs. By providing your name, you enable us to address you personally and to manage your data easily. Your address data, in particular your postcode, enables us to provide you with offers tailored to your region.
Furthermore, we are constantly striving to improve our offering. This also includes evaluating newsletters that have been sent, e.g. whether the email address provided is accessible, which newsletters are opened, which links within the newsletter are clicked on and whether a response ((automatic) reply, error message, etc.) was generated. You can revoke your consent (use of your email address, use of your personal data) at any time. Revocation does not affect the lawfulness of data processing prior to revocation. Please use the unsubscribe page for this purpose. You will also find information on unsubscribing in the footer of each newsletter.
Information and contextual additions provided by us are stored on servers belonging to our software partner HubSpot. They are used by us for the aforementioned services and may be used by HubSpot to enrich its own metadata on companies in order to improve its own tracking or information services.

HubSpot is a software company from the United States with a branch office in Berlin.

HubSpot
Unter den Linden 26
10117 Berlin

Information about HubSpot data protection:

• Data protection regulations
• GDPR compliance

Data processing is carried out on the basis of Art. 6 (1) (a) ‘Consent to contact or advertising measures, transfer of data to HubSpot if necessary’ and (f) ‘Maintenance of business relationships with existing or new partners, further development of the business activities of the Lenze Group’ GDPR.

Social media general

We also offer you comprehensive personal support and the opportunity to stay in touch with us via our social media pages (Facebook, YouTube, Kununu, Xing, LinkedIn, Instagram, Threads) on the basis of Art. 6 (1) (a) GDPR. These social media services collect personal data themselves, e.g. via your profile created there or via so-called social plug-ins that are implemented in third-party websites.

When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to the servers of the respective companies. The content of the plug-ins is transmitted directly to your browser and integrated into the website.

We therefore have no influence on the scope of data collected by the respective companies using these plugins. We therefore inform you according to our current knowledge:

By integrating the plugins, the respective companies receive the information that you have accessed the corresponding page of our website. If you are logged in to one of the above-mentioned companies, they can assign the visit to your account there. When you interact with the plugins, the corresponding information is transmitted directly from your browser to the respective company and stored there. If you do not have an account with one of the above-mentioned companies, it is still possible that they may obtain and store your IP address.
It cannot therefore be ruled out that every visitor to our website may be recorded by the above-mentioned companies on the basis of their IP address and the URL accessed, even if they do not click on the plugins and are not logged in with a user account with the company.

For information on the purpose and scope of data collection and the further processing and use of data by these companies, as well as your rights in this regard and settings options for protecting your privacy, please refer to the data protection information provided by:

• YouTube privacy policy
• Kununu / Xing privacy policy
• LinkedIn privacy policy
• Facebook privacy policy
• Instagram privacy policy
• Supplementary Threads privacy policy

Facebook / Instagram / Threads

Our Facebook/Instagram/Threads information pages (hereinafter referred to as ‘information pages’) are provided by Facebook/Instagram and edited by the above-mentioned responsible parties (owners of the information page, hereinafter referred to as ‘we’).
The joint controllers for the operation of our information pages within the meaning of Article 26 GDPR and other data protection regulations are:

Meta Platforms Irleland Ltd.

Merrion Road,
Dublin 4, D04 X2K54, Irland
(nachfolgend "Meta")
und
Lenze SE, Germany.

Processing of personal data by Meta

Meta processes your personal data when you visit our information page. You can find out which personal data Meta processes and what data protection rights you have vis-à-vis Meta in the linked data protection guidelines of Facebook/Instagram/Threads. As the owner of the information page, we have no influence on the data processing by Meta.

Settings options and access to statistical data

Meta provides the owner of the information page with the following settings options and grants access to the following data:

• We can set the target audience for our information page or for individual posts published on the information page. The settings are made using general parameters (e.g. age group, language, region, interests), which allow our content to be targeted at specific groups. The settings available to us do not allow us to address or identify individual persons.
• Meta grants us access to statistical analyses that provide information about the use of our information page. The analyses visible to us do not allow us to analyse the usage behaviour of individual persons. We can only view aggregated data (including number of visits, likes, followers, region of origin, age group, gender) that provides information about our audience and the use of our information page.

Further information on the statistics provided by Meta.
Furthermore, the owner of the information page cannot influence Meta's data processing. We process this data to protect our legitimate interests in accordance with Art. 6(1)(f) GDPR in order to better understand and optimise the use of our information page.

Data collection and processing when establishing contact

When you send us messages via Facebook/Instagram/Threads, we receive the following data from Meta:

• Message entered
• Name
• Profile picture
• Attachments
• Voice messages

This personal data is used to process your enquiry.
If you contact us via email or other Facebook/Instagram/Threads functions (e.g. comments) on the platform, the information you provide, your username and other information about your usage behaviour will be stored by Meta. You can find out more about data processing by Meta in the privacy policy linked above. We process your personal data to handle your enquiry within the group of companies. It will not be passed on to third parties unless your enquiry requires this. In case of doubt, we will explicitly point this out to you.

Data processing is carried out on the basis of Art. 6 (1) lit. f) ‘Legitimate interest in the economic use and needs-based design of advertising measures under the influence of social media’ GDPR.

LinkedIn

We use analysis and conversion tracking technologies from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’).
LinkedIn uses cookies and pixels to identify you. Data about your use of our website (URL, referrer URL, IP address, device and browser properties) is collected via the LinkedIn Insight tag. The technologies used by LinkedIn allow you to see relevant advertising based on your interests. We receive aggregated and anonymised reports from LinkedIn about advertising activities and how you interact with our website. The information collected as part of LinkedIn conversion tracking may also be processed on LinkedIn Inc. systems in the United States.

Data processing is based on Art. 6 (1) (a) ‘Consent to conversion tracking’ and (f) ‘Legitimate interest in the economic use and needs-based design of advertising measures under the influence of social media’ GDPR.

Google Maps

Our website uses Google Maps, a map service provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), via an API. In this context, it is necessary to store your IP address. The information obtained in this way is usually transferred to a Google server in the USA and stored there. We have no influence on this data transfer. Further information can be found in Google's privacy policy (https://www.google.de/intl/de/policies/privacy/).

Data processing is based on Art. 6(1)(a) ‘Consent to use the plug-in’ and (f) ‘Legitimate interest in offering simple route planning mechanisms regarding the accessibility of our locations’ GDPR.

OpenCage

Provision of geocoding data using API interfaces for optimal searching of specific addresses (service providers, partners, locations) based on address fragments or standardised coordinates.

Data processing is carried out on the basis of Art. 6(1)(f) GDPR, ‘Legitimate interest in offering simple mechanisms for route planning with regard to the accessibility of our locations’.

Federal Communications Commission

Provision of geocoding data using API interfaces for optimal searching of specific addresses (service providers, partners, locations) based on address fragments or standardised coordinates.

Data processing is carried out on the basis of Art. 6(1)(f) GDPR, ‘Legitimate interest in offering simple mechanisms for route planning with regard to the accessibility of our locations’.

Virtual Meetings/ Webinars / Live Webcasts

Registration for webinars or live webcasts is done via contact forms that we have implemented as part of our HubSpot integration. Invitations to virtual meetings are sent directly by Lenze employees, e.g. via email. We use systems hosted by Microsoft in a European data centre to provide the webinars or live webcasts. Participant data is processed in this context and stored on the third-party provider's systems.
This includes registration and/or contact details and, where possible (or enabled)
written or spoken contributions

• shared screen content
• the participant.

For further information, please refer to Microsoft's privacy policy and please also observe this.

Data processing is carried out on the basis of Art. 6 (1) (a) ‘Consent when registering for an event’, (b) ‘Visual support for business development or implementation measures’ and (f) ‘Legitimate interest in informing interested parties, even if inactive, about products, services or the Lenze Group’ GDPR.

Appointment scheduling

We use the booking functions of MS Bookings on a case-by-case basis so that you can independently arrange appointments with various contact persons at Lenze.
You provide us with your personal data exclusively for the purpose of organising appointments with these contact persons. We collect this data primarily to make the coordination process as easy as possible for both sides.
For further information, please refer to the Microsoft privacy policy and please also observe this.

Data processing is carried out on the basis of Art. 6 (1) (b) ‘Supporting business development or implementation measures’ and (f) ‘Legitimate interest in informing interested parties about products, services or the Lenze Group’ GDPR.

Remote Service

LENZE (hereinafter referred to as "We") is a provider of remote services via TeamViewer and as such is the responsible entity in data protection terms for the collection, processing and use of personal data of the customer and its employees. We therefore ensure the confidential handling of all information and take the protection of your trade and business secrets and your data very seriously. We collect, process and use your personal dataonly in accordance with the content of this Data Protection Declaration and the relevant,applicable laws on data protection. By way of this Data Protection Declaration,we wish to inform you as to whichpersonal data concerning you we collect, process and use in connection with the performance of the re-mote services.Personal data within the meaning of this declaration involves individual details about personal or factual circumstances of a natural person. This includes all information on the identity of individuals such as, for example, their name, e-mailaddress or postal address. On the other hand, however, information that cannot be associated with a natural person (such as, for example, information of a solely company-related nature) does not count as personal infor-mation.
The legal basis of the data processing is Art. 6 paragraph 1 lit. a) and b) GDPR.

Use of TeamViewer, registration

The use of remote services is only possible if you have installed the TeamViewer software on your computer as per the technical explanations. When using TeamViewer, you are free to choose your accessdata, including username, which is displayed for us to establish the con-nection. It is not necessary to provide personal data in this regard.Until the remote connection has been established we do not receive any further information via your computer and the relevantly installed systems with the exception of your username.TeamViewer is a program produced by TeamViewer GmbH, Göppingen, Germany via which we provide remote services. We have an agreement with TeamViewer GmbH on commis-sioneddata processing, according to which all personal data is collected, processed and used under our sole responsibility and according to our instructions.

Performance of the remote services

When performing remote services, we see your screen,including all information available on it. In your own interests,you should therefore quit all programs and close displaysthat are not related to the remote services. It is contractually provided for that you shall ensure that we do not come into contact with personal data from your environment when performing the remote services.

Recording of the use of remote services

The use of remote services is recorded at the company level, in addition to which the name of the contact person is stored. The recording thereof is carried out for billing purposes only. The personal data is deleted as soon as the purpose of its storage is no longer given.

Lenze takes precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorised access or disclosure.
Your data may be processed by integrated service providers. In this case, we will structure the contractual relationship in accordance with the relevant requirements of Art. 6 GDPR in conjunction with Art. 26 or Art. 28 GDPR. Both Lenze and the service provider use technical and organisational security measures to protect your collected data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Persons under the age of 18 should not divulge any personal data to us without the consent of a parent or guardian. We do not request any personal data from children or young persons. We do not knowingly collect any such data or pass it on to third parties.

As the Internet continues to evolve, we will also continuously adapt our data protection notice. We will announce any changes on this page in good time. You should therefore visit this page regularly to find out about the current status of the data protection notice.
If you have any questions, e.g. regarding the processing of your personal data, suggestions or comments on the subject of data protection, please contact the data protection officer at Lenze SE in Germany:
Lenze SE
Data Protection Officer
PO Box 10 13 52, D-31763 Hameln
Hans-Lenze-Straße 1, D-31855 Aerzen
dataprivacy@lenze.com

You can request information at any time about whether we have stored personal data about you and what data this is. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right to information

You may request confirmation from the controller as to whether personal data concerning you is being processed by us, for what purpose and for how long, which categories of data are affected, and to which recipients or categories of recipients this data is disclosed.

Right to rectification, completion, restriction

You may request the rectification or completion of inaccurate or incomplete data concerning you. You also have the right to restrict processing, particularly in the case of statutory retention obligations.

Right to erasure

You may request the erasure of data concerning you, particularly if you withdraw your consent.

Right to data portability

You have the right to request the provision of personal data concerning you in a machine-readable format.

Right to object, withdraw consent and lodge a complaint

You may object to the processing of your personal data and withdraw your consent. You have the right to lodge a complaint with a supervisory authority.

Last update: 02/2026