Privacy policy

1. Provider and controller as defined by the GDPR

This privacy policy applies to the website quality-mes.com. The controller is:

Carl Zeiss MES Solutions GmbH
Postgasse 1
89073 Ulm
Phone: +49 731 880177 0
E-mail: mes-info.metrology.de@zeiss.com

2. Name and address of the data protection officer

Any data subject may contact our data protection officer directly with questions about data protection.

Group Data Protection Officer
Carl-Zeiss-Straße 22
73447 Oberkochen
Phone: +49 7364 20-0
E-mail: dataprivacy@zeiss.com (please do not send confidential content by e-mail)

3. Collection and storage of data when you visit our website

When you call up our website, the browser on your device automatically sends information to the server of our website. This information is stored temporarily in what are known as server log files. The following information is recorded:

• Name and URL of the page visited
• The website from which the request came (referrer URL)
• Date and time of access
• IP address
• Web browser and operating system of your device
• Domain name

The legal basis for this processing is Art. 6(1)(1)(f) GDPR. We do not use this data to identify you, and it is not merged with other personal data. We do, however, reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.

Recording this data is strictly necessary to ensure that a connection to the website is established smoothly and that our content can be used, delivered and displayed conveniently. We also use the data to evaluate system security and stability and for statistical purposes, in particular to optimise the website, the technology and our offering.

4. Personal data, use and transfer to third parties

Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, address, e-mail address, telephone number and gender.

We collect, process and use your personal data only if you consent to its collection, processing and use or if another legal basis under the GDPR applies.

We use the data you provide to handle your enquiries and to process contracts, and — where you have given the corresponding consent — to send you information, promotional material and invitations to our events. Your data is not used for any other purpose. Use for statistical purposes is excepted from this, provided that the data made available to us is anonymised.

Your data is passed on to third parties only if there is a legal obligation to do so, if it is necessary in order to process a contract, as described in section 8 for demo requests, or in order to assert, exercise or defend legal claims, provided this is necessary and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on. Your data is forwarded exclusively on the basis of the GDPR. Some third parties that have to be involved in processing a contract are based outside the Federal Republic of Germany or process your personal data outside Germany. The level of protection in other countries may not correspond to that in Germany. However, we transfer your personal data only to countries for which the EU Commission has decided that they offer an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection, for which purpose we conclude standard contractual clauses.

5. Duration of data storage and erasure

We will not keep the data required to process a contract for longer than is necessary to fulfil our contractual and legal obligations and to defend against liability claims. Personal data that you have provided to us in order to receive information and promotional material or invitations to our events will be stored only until you withdraw your consent to this use of your data. If the purpose of storage no longer applies or a statutory retention period expires, the personal data is blocked or erased.

6. Data security

Your personal data is protected by appropriate organisational and technical measures designed to protect it against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. Nevertheless, internet-based data transmissions can have security gaps, so absolute protection cannot be guaranteed.

7. Cookies

This website does not use cookies. It does not embed any third-party analytics, tracking or advertising services either. Fonts, images and videos are delivered from our own server.

8. Contact and demo enquiries

You can contact us using the “Book a demo” form on this website. In doing so we collect the details you enter: contact person, company, e-mail address and telephone number, plus — optionally — your preferred appointment and your message. A valid e-mail address is required so that we can answer your enquiry; all further details are voluntary.

Our Innovation Summit landing page has its own demo request form. There we collect your name, your company and your business e-mail address (all three are required so that we can arrange your demo), together with the time of your consent, the address of the page you used — including campaign parameters that tell us through which summit touchpoint (talk, card or booth) you reached the page — and the language version you used. We also record the processing status of your request. We process this data to arrange your demo and to handle the launch offer connected to your request.

On that landing page you can optionally use the badge scan: the QR code on your event badge is captured with your device's camera and decoded locally in your browser. The camera image is neither stored nor transmitted — only the contact details read from the code are entered into the form fields, where you can review and change them before sending. We store only the details you submit with the form, plus the information that the badge scan was used. Any other content of the code is neither used nor stored.

To handle your request, we record your details in our customer relationship management (CRM) system and pass them on to the sales and specialist departments responsible for ZEISS Quality MES at Carl Zeiss MES Solutions GmbH and Carl Zeiss Industrielle Messtechnik GmbH. If you registered for the ZEISS Innovation Summit 2026 or your badge was scanned at a ZEISS booth during the summit, we combine your request with this data using your e-mail address and add missing contact details, such as your telephone number or your job title. We do this solely to arrange your demo and to handle the launch offer. We do not use your details for newsletters or other advertising on this basis.

The details from the form are processed to handle your request in accordance with Art. 6(1)(1)(a) GDPR on the basis of the consent you give voluntarily. Recording them in the CRM, passing them on to the ZEISS companies named above, and combining and supplementing them with your summit data take place in accordance with Art. 6(1)(1)(f) GDPR. Our legitimate interest is to handle business enquiries completely and promptly. You can object to this processing at any time (section 9.6).

If no contract is concluded, we erase your details 24 months after our last contact with you. If you withdraw your consent or object to the processing, we erase your details earlier. Statutory retention obligations remain unaffected.

9. Your rights as a data subject

If you would like to exercise one or more of the rights listed below, you can contact our data protection officer at any time.

9.1 Right of access (Art. 15 GDPR)

You have the right to obtain free information from us at any time about the personal data stored about you, as well as a copy of that information. You also have the right to information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be disclosed — in particular recipients in third countries or international organisations —, where possible the envisaged storage period or, if that is not possible, the criteria used to determine that period, the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by the controller, or of a right to object to such processing, and the existence of a right to lodge a complaint with a supervisory authority; where the personal data is not collected from the data subject, any available information as to its source; and the existence of automated decision-making, including profiling, and — at least in those cases — meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject. As a data subject you also have the right to be informed whether personal data has been transferred to a third country or to an international organisation. Where this is the case, you have the right to be informed of the appropriate safeguards relating to the transfer.

9.2 Right to rectification (Art. 16 GDPR)

You have the right to obtain the rectification without undue delay of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed.

9.3 Right to erasure (right to be forgotten) (Art. 17 and 19 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies and where processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims:

• The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
• You withdraw the consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
• The personal data has been unlawfully processed.
• Erasure of the personal data is required for compliance with a legal obligation under Union or Member State law to which we are subject.
• The personal data was collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

Where we have made the personal data public and our company, as controller pursuant to Art. 17(1) GDPR, is obliged to erase it, we take appropriate measures — including of a technical nature and taking account of available technology and the cost of implementation — to inform other controllers processing the published personal data that you have requested the erasure of that data, insofar as processing is not required. Our data protection officer or another of our employees will arrange what is necessary.

9.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain from us restriction of processing where the accuracy of the personal data is contested by you, where the processing is unlawful but you oppose erasure of the personal data, where we no longer need the personal data for the purposes of the processing but you require it for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Art. 21(1) GDPR.

9.5 Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not adversely affected.

9.6 Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. This also applies to profiling based on those provisions. In the event of an objection we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes. You also have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which we carry out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.

9.7 Automated individual decision-making, including profiling (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, provided the decision (i) is not necessary for entering into, or the performance of, a contract between us, or (ii) is not authorised by Union or Member State law to which we are subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (iii) is not based on your explicit consent.

Where the decision is necessary for entering into, or the performance of, a contract between you and us, or is based on your explicit consent, we will take appropriate measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

9.8 Right to withdraw consent under data protection law (Art. 7(3) GDPR)

You have the right to withdraw consent once given at any time. As a result, we may no longer continue the data processing based on that consent in the future.

9.9 Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority. As a rule you can contact the supervisory authority of your habitual residence or place of work, or that of our registered office.

10. Validity and amendment of this privacy policy

This privacy policy is currently valid and dated November 2026. As we develop our website and the offerings on it, or as official or legal requirements change, we reserve the right to amend this privacy policy. The current version can be called up on this website at any time under “Privacy policy”.