Compliance With The General Data Protection Regulation - Siemens SIMOTICS CONNECT 400 Operating Instructions Manual

1.6.3

Compliance with the General Data Protection Regulation

Description
Siemens complies with the principles of the General Data Protection Regulation (EU), in
particular the principle of data minimization (privacy by design). For this SINAMICS product, this
means:
• User management and access control (UMAC)
The product processes or stores the following personal data:
– Login data for user management and access control:
The data for user management and access control are stored in the converter and optionally
on a memory card.
• Support data (optional)
For optimal support in service cases, the end user or machine manufacturer (OEM) can
optionally store contact data (header, email address, telephone number, homepage) in the
converter.
If these data are created, the author must give thought to data protection consent for these
optional data. Siemens takes no responsibility for these data.
These support contact data can be read and are freely accessible in, for example, the user
interface as well as in the diagnostics report. These data are not encrypted.
These data are used for user management and access control (UMAC) and for the support
function. The storage of these data is appropriate and limited to what is necessary, as it is
essential to identify the authorized operators and service contact.
The personal data are also available as part of the backup system to ensure fast recovery of
use cases.
The above-mentioned personal data cannot be stored anonymously or pseudonymized,
as they serve the purpose of identifying the operating personnel. The anonymization or
pseudonymization, e.g. of the login data, must be performed using suitable login names and
contact data by the plant/machine operator.
Our product does not provide any functions for automatically deleting personal data.
Individual UMAC data can be deleted manually by authorized personnel as soon as this is
deemed recommended/required.
1.6.4 Compliance with the General Data Protection Regulation
Description
Siemens complies with the principles of the General Data Protection Regulation (EU), in
particular the principle of data minimization ("privacy by design").
SIMOTICS CONNECT 400
Operating Instructions, 04/2023, A5E50161952B AL
User name, group, password, role, rights.
Introduction
1.6 Important product information
17