General Data Protection Regulation (GDPR)

Siemens adheres to the principles of data protection, in particular the principles of data minimization (Privacy by Design).

For this product, Industrial Edge, this means:

Personal data

The product processes and stores the following personal data:

• First name and last name (Sign up)
• Email address
• Passwords
• Timestamp
• Location data (time zone)
• IP addresses
• MAC addresses

If the customer links the data mentioned above to other data (e.g. shift plans) or if the customer saves personal information on the same medium (e.g. hard disk) and thus creates a personal reference, the customer has to ensure that the guidelines regarding data protection are observed.

Purposes

The data mentioned above is required for the following purposes:

• Access protection and security measures (for example login, IP addresses)
• Process synchronization and integrity (for example information about time zones, IP addresses)
• Archiving system for traceability and verification of processes (for example access timestamps)
• Message system for traceability and availability (for example e-mail notification)

Storage of the data is affected for a suitable purpose and is limited to what is strictly necessary, as the information is indispensable in order to identify the authorized operators.

Scope

Platform-related authentication data (login to the IED admin interface) is stored on the IEM system. The IEDs do NOT contain any related login information as every IED requires a permanently established connection to the IEM to work properly. However, the IEA providers are responsible for additional, app-related data and their protection.

Data protection

The above data will not be stored anonymously or pseudonymized, as the purpose (identification of the operating personnel) cannot be achieved otherwise. The data will be used only within the product and will not be automatically passed on to third parties or unauthorized persons.

The above data is secured by adequate encryption technologies. The customer must ensure the access protection as part of his process configuration.

Industrial Security

Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept.

Siemens’ products and solutions constitute one element of such a concept.

Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.

For additional information on industrial security measures that may be implemented, please visit.

Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customer’s exposure to cyber threats.

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed at.

Deletion policy

This product does not provide an automated deletion of the data mentioned above.

Cookies

Regarding cookies, please refer to the Siemens cookie guidelines.