We respect privacy and your rights to control your personal data. Our principal guidelines are simple: we are transparent about the data we collect and why, we protect your data and we do not and will not sell your data to third parties.
The primary purpose of collecting your data is to enhance your customer experience, whether through providing advanced systems for torque data integrity or offering highly responsive customer support, ensuring you operate as effortlessly as possible.
This Privacy Statement (the ‘Statement’) explains the personal information we collect from you, either directly or indirectly, and how we use it. Personal information is any information that can be used to identify you or that we can link to you. The Statement also elaborates on the choices you can make about the data we collect and how you can control these decisions. It applies to all products, services, systems, and solutions offered by Crane Group Ltd, including Crane Electronics Ltd (UK), Crane Electronics GmbH (Germany), and Crane Electronics Inc. (USA) (collectively, ‘Products’), as well as our data management software. It also applies to Crane Group Ltd-controlled websites and offline interactions, such as visiting a Crane Group Ltd office or attending a Crane Group Ltd event (collectively, ‘Services’). This Statement also covers personal data of employees and contractors, where applicable. Note that Crane Electronics Inc. does not process European customer data under this Statement, as it operates solely in the USA, which is not subject to GDPR.
Please read this Statement carefully to understand how Crane Group Ltd, as the data controller, may collect, use, and share your personal information. The terms ‘we’, ‘us’, or ‘Crane Group Ltd’ refer to Crane Electronics Ltd (UK) and Crane Electronics GmbH (Germany), acting as joint controllers for data processing activities subject to GDPR, and Crane Electronics Inc. (USA) for non-GDPR activities, unless otherwise specified. Our contact details are:
- Crane Electronics Ltd: 3 Watling Drive, Sketchley Meadows, Hinckley, LE10 3EY UK
- Crane Electronics GmbH: Im Rank 5, 73655, Pluderhausen, Germany
- Crane Electronics Inc.: 1260 11th Street West, Milan, Illinois, 61264 USA
- Data Protection Officer: contactable at gdpr@crane-electronics.com
As large-scale processing of sensitive data is not undertaken, please contact gdpr@crane-electronics.com for any inquiries.
The Types of Personal Information We Collect
Information you provide to us
We collect information you voluntarily provide, such as:
- Data: Name, phone number, email address, delivery/shipping address, payment information, and employee/contractor details (e.g., employment contracts, payroll data).
- When: When you inquire about Products/Services, purchase from us, contact Customer Service, complete online forms, or engage as an employee/contractor.
- Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) for purchases, support, and employment agreements; consent (Article 6(1)(a) GDPR) for inquiries and optional communications.
- Note: Crane Electronics Inc. does not collect or process European customer data under GDPR.
Information we collect automatically
We automatically collect information, such as:
- Data: Product performance data, IP address, device type, operating system and version, browser type, general geographic location (derived from IP address), webpage interactions, and data from cookies/similar technologies.
- When: When you use our Products, visit our websites, or interact with our Services.
- Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) to improve website functionality and Product performance, provided your rights are not overridden; consent (Article 6(1)(a) GDPR) for non-essential cookies (see Cookies).
- Note: Crane Electronics Inc. may collect similar data for US customers, but this is not subject to GDPR.
Information obtained from other sources
We may receive information from third parties, such as:
- Data: Social media identifiers or interaction data.
- When: When you interact with us on social media platforms (e.g., LinkedIn, Twitter).
- Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) to enhance customer engagement, subject to restrictions imposed by the data source; consent (Article 6(1)(a) GDPR) where required by platforms.
- Safeguards: We protect third-party data per this Statement and source-specific restrictions.
- Note: Crane Electronics Inc. may receive third-party data for US operations, not involving European customer data.
Information of children
Crane Group Ltd does not target or intend to attract children under 16. We do not knowingly collect personal information from those under 16. If a child under 16 has been improperly registered on our site using false information, we will delete their personal information upon notification from a parent/guardian or discovery by other means, per Article 8 GDPR.
Special Categories of Data
We do not process special categories of data (e.g., health, biometric data) under Article 9 GDPR, except where explicitly consented to for specific support purposes (e.g., diagnostic snapshots). Such data is processed only with your explicit consent and deleted promptly after use.
Customer Interactions with Crane Group Ltd
To clarify when we collect personal information, we outline key interactions:
Learning about Crane Group Ltd
- Context: Browsing our website, calling sales representatives, visiting our premises (UK, Germany, or USA), or attending events.
- We Collect: Name, email address, IP address, cookie data.
- Why: To share news about Products, events, and Services, and to optimize our website based on geographic and usage data.
- Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) to improve user experience and marketing, balanced against your rights; consent (Article 6(1)(a) GDPR) for non-essential cookies.
- Note: Crane Electronics Inc. handles US-specific interactions, not involving European customer data.
Buying Crane Group Ltd Products or Services
- Context: Purchasing directly or via distributors.
- We Collect: Name, phone number (optional), email address, delivery/shipping address, payment information.
- Why: To process transactions, handle delivery, returns, and related issues.
- Legal Basis: Performance of a contract (Article 6(1)(b) GDPR). Note: We do not store credit card information, only using it for transaction processing.
- Note: Purchases via Crane Electronics Inc. are processed separately and do not involve European customer data.
Getting Help from Crane Group Ltd
- Context: Contacting Customer Support for Product assistance.
- We Collect: Name, email address, phone number, social media identifiers (if via social media), communication content (including voice recordings if voicemail is left), and diagnostic data (e.g., device details, IP address, error codes, Product configuration).
- Why: To provide efficient support, troubleshoot issues, and process returns/exchanges. Diagnostic snapshots are taken only with prior notification and consent.
- Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) for support; consent (Article 6(1)(a) GDPR) for diagnostic data.
- Note: Crane Electronics Inc. provides support for US customers, not involving European customer data.
Employee and Contractor Interations
- Context: Managing employment or contractor relationships (e.g., payroll, HR processes).
- We Collect: Name, contact details, employment history, payroll data, performance records.
- Why: To fulfil employment contracts, comply with labour laws, and manage HR operations.
- Legal Basis: Performance of a contract (Article 6(1)(b) GDPR); legal obligation (Article 6(1)(c) GDPR) for tax and labour compliance; legitimate interests (Article 6(1)(f) GDPR) for HR management, balanced against employee rights.
- Note: Crane Electronics Inc. processes employee/contractor data for US operations, subject to US laws, not GDPR.
How We Use Personal Information
We use your data to provide and enhance our Products and Services, including:
- Providing Product Experience: Operating and supporting Products to ensure seamless functionality (Article 6(1)(b) GDPR).
- Customer Support: Responding to inquiries, diagnosing issues, and providing calibration reminders (Article 6(1)(b) GDPR).
- Product Improvement: Using error reports and usage data to enhance Product features and security (Article 6(1)(f) GDPR).
- Security, Safety and Dispute Resolution: Protecting Products and customers, preventing fraud, and enforcing agreements (Article 6(1)(f) GDPR).
- Business Operations: Conducting aggregate analysis for business intelligence and performance reporting (Article 6(1)(f) GDPR).
- Communication, Marketing and Advertising: Sending updates, Product news, or surveys, with consent or where we have a legitimate interest (Articles 6(1)(a), 6(1)(f) GDPR). We balance marketing interests against your rights, ensuring opt-out options.
How We May Share Personal Information
Crane Group Ltd does not and will not sell your personal information. We share data only as described below:
- Third-Party Vendors: We share data with vendors (e.g., website hosting, shipping, payment processors, email services like MailChimp) for service provision. Vendors are bound by GDPR-compliant data processing agreements (Article 28 GDPR) and process data only on our behalf. For example, payment data is shared with processors like HSBC bank to complete transactions. Crane Electronics Inc. uses US-based vendors for US operations, not involving European customer data.
- Crane Group Ltd Affiliates and Subsidiaries: We share data with Crane Electronics Ltd (UK), Crane Electronics GmbH (Germany), and Crane Electronics Inc. (USA) for internal administration, marketing, and service delivery. Intra-group data sharing agreements ensure GDPR compliance for UK and German entities. No European customer data is shared with Crane Electronics Inc.
- Compelled Disclosure: We disclose data to law enforcement or in legal proceedings when legally required or to protect our rights, affiliates, or users (Article 6(1)(c), 6(1)(f) GDPR).
- Sale or Merger: In the event of a merger, acquisition, or asset sale, we may transfer data, notifying you via email or website notice.
- Aggregate Data: We share anonymized data for industry analysis, ensuring recipients cannot identify you.
The Legal Bases for Using Personal Information
We rely on the following legal bases:
- Performance of a Contract (Article 6(1)(b) GDPR): For purchases, account management, support, delivery, and employment contracts.
- Legitimate Interests (Article 6(1)(f) GDPR): For website optimization, product improvement, fraud prevention, and marketing, where your rights are not overridden. Our balancing test ensures processing is proportionate (e.g., IP address collection for analytics does not unduly impact privacy).
- Consent (Article 6(1)(a) GDPR): For non-essential cookies, newsletters, and certain diagnostic data.
- Legal Obligation (Article 6(1)(c) GDPR): For tax, labour, or document retention compliance.
You may object to legitimate interest processing or withdraw consent at any time by emailing gdpr@crane-electronics.com.
Security, Storage and Retention of Personal Information
Security
We protect your data using robust measures, including:
- Limited-access computer systems in controlled facilities.
- Encryption (e.g., Transport Layer Security (TLS)) for data in transit.
- One-way hashed passwords, ensuring they cannot be recovered.
- Regular security audits aligned with UK Cyber Essentials standards.
- GDPR-compliant data processing agreements with third-party vendors (e.g., data centres, MailChimp).
No system is impenetrable, so we advise keeping your password confidential and logging out after sessions. Never disclose your password in response to unsolicited requests. Contact us immediately at gdpr@crane-electronics.com if you suspect misuse.
Storage
Personal data is stored in your region, the United States (data centres), or other countries where Crane Group Ltd or its affiliates/subsidiaries operate. For UK and German entities, international transfers to the US or elsewhere use Standard Contractual Clauses (SCCs) with supplementary measures (e.g., encryption, pseudonymization), per EDPB Recommendations 01/2020, to ensure GDPR compliance. Crane Electronics Inc. processes US customer data locally and does not receive European customer data.
Retention
We retain data only as necessary:
- Customer Data: Transaction data (5 years, per tax laws); support data (3 years post-interaction); marketing data (until consent withdrawal).
- Employee/Contractor Data: Employment records (6 years post-employment, per UK/German labour laws); payroll data (as required by tax authorities).
- Website Analytics: IP addresses/cookie data (up to 2 years, unless anonymized).
Data is deleted securely after retention periods or upon your request, subject to legal obligations. For specific retention queries, email gdpr@crane-electronics.com.
Your Rights and Choices
Your Rights
Subject to GDPR, you have the following rights:
- Access: Obtain a copy of your personal data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion, subject to legal retention obligations.
- Restriction: Limit processing in certain cases.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Data Portability: Receive or transfer your data to another controller.
- Withdraw Consent: Revoke consent at any time without affecting prior processing.
Contact gdpr@crane-electronics.com to exercise these rights. We respond within 30 days, per Article 12(3) GDPR. You may also lodge complaints with:
- UK: Information Commissioner’s Office (ICO), www.ico.org.uk.
- Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), www.bfdi.bund.de, or the relevant Landesbeauftragte (e.g., Bayerischer Landesbeauftragter für Datenschutz for Bavaria).
We aim to resolve complaints fairly. Keep your data accurate and inform us of changes via gdpr@crane-electronics.com.
Your Communication, Marketing and Advertising Preferences
- Opt-Out: Unsubscribe from marketing emails via the “Unsubscribe” link in each email. We respect your choice and stop promotional communications promptly.
- Non-Marketing Communications: We continue sending essential updates (e.g., terms changes, Product updates, calibration reminders, data breach notices) regardless of marketing preferences.
- Interest-Based Advertising: Adjust cookie settings, device settings, or opt out via Network Advertising Initiative or Digital Advertising Alliance. If you opt out of emails, we will not use your email for interest-based ads.
Our Use of Cookies and Other Similar Technologies
We use cookies, pixels, web beacons, and similar technologies to personalize your experience, remember preferences, analyse website usage, and deliver relevant advertising. We obtain your consent for non-essential cookies via a cookie banner on our websites, per Article 7 GDPR and the Privacy Directive.
Cookies
- Strictly Necessary Cookies: Essential for website functionality (e.g., shopping baskets). Legal Basis: Legitimate interests (Article 6(1)(f) GDPR).
- Performance Cookies: Optimize website navigation. Legal Basis: Consent (Article 6(1)(a) GDPR).
- Functional Cookies: Personalize your experience (e.g., store geographic location). Legal Basis: Consent (Article 6(1)(a) GDPR).
- Third-Party Cookies: Used by partners (e.g., Google, Facebook) for analytics and advertising, subject to their privacy policies (e.g., Facebook Data Use Policy). Legal Basis: Consent (Article 6(1)(a) GDPR).
- Analytics Cookies: Via Google Analytics to track visitor behaviour. Legal Basis: Consent (Article 6(1)(a) GDPR). Opt-out at https://tools.google.com/dlpage/gaoptout.
You can manage cookies via browser settings but disabling them may limit website functionality.
Pixels
We use pixels in emails (if you consent to communications) to track engagement and in third-party advertising (e.g., Google, LinkedIn) for relevance. Consent is obtained via our cookie banner.
Newsletter Sign-Up
Subscribing to our newsletter (via MailChimp) requires your consent for forename, surname, company name, and email address. You may unsubscribe anytime via the link in each email. Data is transmitted to MailChimp, which operates under a GDPR-compliant data processing agreement.
Contact Form Completion
Completing online forms (e.g., for product inquiries) requires agreeing to our privacy terms via a tick-box and optional consent for future communications. Data (e.g., forename, surname, company, email) is stored with your consent, revocable at gdpr@crane-electronics.com.
Advertising and Modern Marketing Tools
We use third-party advertisers (e.g., Google, LinkedIn) for interest-based advertising, combining non-personal data to deliver relevant ads. Consent is obtained via our cookie banner. Opt-out via NAI or DAA. If you opt out of emails, we will not use your email for these ads.
German-Specific Data Protection
For data processed by Crane Electronics GmbH, we comply with the Bundesdatenschutzgesetz (BDSG). Employee data processing (e.g., HR, payroll) adheres to BDSG Sections 26 and 22, with consent or legal obligations as bases. Data protection impact assessments (DPIAs) are conducted for high-risk processing, per Article 35 GDPR. Contact the German supervisory authority (e.g., Bayerischer Landesbeauftragter für Datenschutz) for complaints.
US-Specific Data Processing
Crane Electronics Inc. processes data for US customers and employees, subject to US federal and state laws (e.g., CCPA, where applicable). No European customer data is transferred to Crane Electronics Inc., ensuring GDPR compliance for EU/UK data.
How to Contact Us
For questions or to exercise your rights, contact:
Email: gdpr@crane-electronics.com
Address:
- Crane Electronics Ltd, 3 Watling Drive, Hinckley LE10 3EY, UK
- Crane Electronics GmbH, Im Rank 5, 73655, Pluderhausen, Germany
- Crane Electronics Inc., 1260 11th Street West, Milan, Illinois, 61264, USA
Changes to Our Privacy Statement
We review this Statement annually and update it as needed to reflect customer feedback, Product changes, or regulatory updates. Material changes are communicated via email or website notices. Check the ‘Last Update’ date for the latest version.
