1. Name and contact details of the person responsible for data processing
This data privacy information applies to data processing by:
Name of company: Rieber GmbH & Co. KG
Responsible managing director: Ulrich Fuchs
Address: Hoffmannstraße 44, 72770 Reutlingen, Germany
E-mail: datenschutz@rieber.de
Tel.: +49 (0) 7121 518-0
Fax: +49 (0) 7121 518-300
2. Collection and storage of personal data, nature and purpose of its use
a) When visiting the website
When you access our website, the browser used by your end device automatically sends information to our website’s server. This information is stored temporarily in a log file. The following details are recorded, without any action on your part, and saved until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of accessed file
- Website from which it is accessed (referrer URL)
- Your browser and your computer’s operating system
The name of your access provider. - This data is processed by us for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring that our website is convenient to use
- Evaluating system security and stability
- Other administrative purposes.
The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest follows on from the above-listed purposes of data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions concerning your person.
When you visit our website, we also use cookies and analysis services. For more detailed explanations of these, please see Sections 4 and 5 of this Data Privacy Statement.
b) When you sign up for our newsletter
Insofar as you provide your express consent according to Article 6 Paragraph 1 Sentence 1 Letter a GDPR, we use your e-mail address for the purpose of sending you our newsletter on a regular basis. In order to receive the newsletter, it is sufficient for you to specify an e-mail address. This is how it works:
When you sign up for the newsletter, we send you an e-mail to the address provided containing a link, and this has to be confirmed by you. This demonstrates to us that you are the owner of the e-mail address and that you agree to the newsletter being sent. No other data is collected. This data is only used for sending out the newsletter and is not shared with third parties.
When you sign up for the newsletter, we save your IP address and the date of registration. This serves solely as proof in the event that a third party misuses an e-mail address and signs up for the newsletter without the authorised person knowing.
You can cancel your subscription to the newsletter free of charge at any time. The cancellation can be effected by means of a link in the newsletter itself or by via the contact options named above.
c) When you use our contact form
On all issues we potentially offer you the possibility of getting in contact with us by means of a form provided on the website. Here, it is necessary to provide a valid e-mail address so that we know who has submitted the request and are able to respond to it.
Additional details can be provided voluntarily.
Data processing for the purpose of establishing contact with us is carried out according to Article 6 Paragraph 1 Sentence 1 Letter a GDPR based on your consent, given voluntarily.
The personal data collected by us for use of the contact form is automatically deleted once the request has been dealt with.
3. Disclosure of data
Your personal data is never disclosed to third parties for any purposes other than those listed below.
We only disclose your personal data to third parties if:
• You have issued your express consent to such in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR
• This is legally permitted and necessary for the performance of contractual relationships with you in accordance with Article 6 Paragraph 1 Sentence 1 Letter b) GDPR
• A legal obligation to disclose the data in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) GDPR exists
• Disclosure is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter f GDPR to protect the legitimate interests of the controller or a third party.
External recipients can be in particular:
Processors: These are service providers who process personal data on our behalf. Processors are only permitted to use the data for the specified purpose and in accordance with our instructions.
The basis for this is Article 28 GDPR.
Public bodies: These are government institutions or authorities, such as tax offices, courts, etc. In these cases, personal data is only transferred if it is necessary for the fulfilment of legal obligations.
Non-public bodies: These are natural and legal persons, companies and other associations of persons under private law, such as service providers, tax advisors and auditors, to whom data is transferred as a result of a legal obligation or to safeguard legitimate interests.
4. Disclosure of data
We process your personal data only as long as necessary to fulfil the respective purposes or, in the case of existing consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a GDPR, until it is revoked.
If permission or an obligation to continue to process particular data exists due to legal provisions, the data concerned will be stored for the period for which we are subject to a legal obligation to retain or document it. This is where legal proof and the retention obligations of the German Commercial Code come into play. The duration of storage periods can therefore be up to ten years, plus the statute of limitations.
5. Cookies
We use cookies on our website. These are small files which your browser automatically creates and saves on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain viruses, trojans or any other malware.
In a cookie, information is stored which arises from interaction with the specific end device used. This does not mean that we are informed directly of your identity, however.
The use of cookies firstly serves to make it more pleasant for you to use our website. For example, we use so-called session cookies to identify that you have already visited certain pages of our website before. These are automatically deleted when you leave our website.
In addition, we also use temporary cookies to optimise user-friendliness; these are saved for a defined period of time on your end device. If you visit our website again in order to make use of our services, the system automatically identifies that you have visited us before, recovering the entries and settings you made previously so that you do not have to repeat them.
We also use cookies to compile statistics on the use of our website and in order to analyse these for the purpose of optimising what we offer (see Section 5). When you visit our website, these cookies enable us to identify automatically that you have visited us previously. These cookies are deleted automatically after a defined period of time in each case.
The data processed by cookies is necessary for the purposes stated in order to safeguard our legitimate interests and those of third parties according to Article 6 Paragraph 1 Sentence 1 Letter f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser not to save cookies on your computer or to display a message every time a new cookie is created. However, complete deactivation of cookies can result in you not being able to use all the functions of our website.
6. Analysis tools (tracking tools)
The tracking measures listed below are applied by us based on Article 6 Paragraph 1 Sentence 1 Letter f GDPR. We apply these tracking measures in order to ensure needs-oriented design and ongoing optimisation of our website. We also apply the tracking measures to compile statistics on the use of our website and to analyse these for the purpose of optimising our website for you. These interests are to be regarded as legitimate as defined by the above provision.
Details of the various data processing purposes and data categories are stated in connection with the relevant tracking tools.
Google Analytics
On our web pages we use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA ("Google"). Google Analytics uses so-called cookies (see Section 4). The information generated by the cookie regarding use of these web pages is generally sent to a Google server in the USA and saved there. However, in case of the activation of IP anonymization on these web pages, the IP address is first abbreviated by Google within the member states of the European Union and in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases is the entire IP address transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google uses the information to analyse use of these web pages so as to compile reports on website activities and provide other services for the website operator connected with website use and internet use. As far as the IP address is concerned that is transferred by the customer’s browser in connection with Google Analytics, this is not linked to other Google data. Customers can prevent the saving of cookies by making the appropriate setting in their browser software; however, we would like to point out that in this case, the full range of functions offered by this website may not be available. The customer can also prevent the data generated by the cookie relating to use of the website (incl. the IP address) from being sent to Google and prevent the processing of this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
Alternatively to the browser add-on or in connection with browsers on mobile devices, you can prevent Google Analytics recording data within this website by clicking on this link (https://tools.google.com/dlpage/gaoptout?hl=de). In this case, an opt-out cookie is saved on your device. If you delete your cookies, you will have to click on this link again.
7. Social media plug-ins
On our website we use plug-ins for the social networks listed below based on Article 6 Paragraph 1 Sentence 1 Letter f GDPR in order to raise the profile of our website. The underlying promotional purpose is to be regarded as a legitimate interest according to GDPR. The respective provider is responsible for operating these plug-ins in a way that is compliant with data privacy requirements. The plug-ins are incorporated by us by means of the so-called two-click method in order to provide the best possible protection for visitors to our website.
Instagram
Our website uses so-called plug-ins provided by Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The Instagram plug-in can be recognised by the "Instagram button", e.g. in the form of an "Instagram camera".
When you access a page on our website that contains such a plug-in, your browser establishes a direct link to the Instagram servers. The content of the plug-in is sent directly by Instagram to your browser and integrated in the web page. Through this integration, Instagram receives the information that your browser has accessed the relevant page of our website, even if you do not possess an Instagram profile or are not logged into Instagram.
This information (including your IP address) is sent directly by your browser to an Instagram server in the USA and saved there. If you are logged into Instagram, Instagram can attribute the website visit directly to your Instagram account. When you interact with the plug-ins, e.g. by activating the "Instagram button", this information is likewise sent directly to the Instagram server and saved there.
The information is also published on your Instagram account and displayed to your contacts.
If you do not want the data collected via our website to be attributed by Instagram directly to your Instagram account, you must log out of Instagram before visiting our website.
We should like to point out that as the provider of this website, we are not aware of the content of the data sent nor how this data is used by Instagram.
For further information, see the Instagram privacy policy at https://help.instagram.com/155833707900388.
8. Online services / internet advertising
Our web pages make use of online services and advertising instruments offered by the companies listed below based on Article 6 Paragraph 1 Sentence 1 Letter f GDPR in the interests of optimum marketing of our website. The underlying promotional purpose is to be regarded as a legitimate interest according to GDPR. The respective provider is responsible for operating these plug-ins in a way that is compliant with data privacy requirements.
a) YouTube
On our website we incorporate online features (generally videos) from the YouTube platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The provider of this content has to register the user’s IP since without the IP address the content cannot be sent to the respective user’s browser. The IP address is used to be able to transport data from its sender to the designated recipient and is therefore required in order to display the content. We have no influence on whether YouTube uses the IP address for statistical purposes, for example. If this comes to our knowledge, we inform users. For further information on YouTube data privacy as offered by the provider Google, see:
https://policies.google.com/privacy?hl=de&gl=de
b) Vimeo
On our website we incorporate videos from the Vimeo platform operated by the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. The provider of this content has to register the user’s IP since without the IP address the content cannot be sent to the respective user’s browser. The IP address is used to be able to transport data from its sender to the designated recipient and is therefore required in order to display the content. We have no influence on whether Vimeo uses the IP address for statistical purposes, for example. If this comes to our knowledge, we inform users.
For further information on Vimeo’s data privacy, see: https://vimeo.com/privacy.
9. Rights of the persons concerned
You are legally entitled:
- according to Article 15 GDPR to request information on the personal data processed by us. In particular you can request information regarding the purposes of processing, the category of personal data, the categories of recipient to whom your data is or has been disclosed, the planned duration of storage, the existence of a right to correction, erasure, limitation of processing or objection, the existence of a right to complain, the origin of your data if it has not been collected by us and the existence of any automated decision-making including profiling and, if applicable, substantive details of how this works;
- according to Article 16 GDPR to request, without delay, the completion of your personal data saved by us or its correction if incorrect;
- according to Article 17 GDPR to request the erasure of your personal data saved by us insofar as its processing is not required in order to exercise the right of freedom of expression and information, meet a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- according to Article 18 GDPR to limit the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful but you reject its erasure and we no longer require the data, and you require it for the assertion, exercise or defence of legal claims or you have filed an objection to the processing of the data according to Article 21 GDPR;
- according to Article 20 GDPR to receive the personal data you have provided to us in a structured, conventional, machine-readable format or to request that it be sent to another person responsible;
- according to Article 7 Paragraph 3 GDPR to withdraw your consent previously given to us. The result of this is that we may no longer continue with data processing based on this consent in the future.
- according to Article 77 GDPR complain to a supervisory authority if you believe that the processing of your personal data is unlawful. Generally speaking you can appeal to the supervisory authority at your normal place or residence or work or that of our registered offices.
10. Right to object
If your personal data is processed based on legitimate interests according to Article 6 Paragraph 1 Sentence 1 Letter f GDPR, you have the right, according to Article 21 GDPR, to object to such processing of your personal data insofar as grounds apply that arise directly from your particular situation or if the objection refers to direct advertising. In the latter case, you have a general right to object which we implement without the need to specify a particular situation.
If you would like to exercise a right to object or a right of withdrawal, it is sufficient to write an e-mail to: datenschutz@rieber.de
11. Data security
Where personal data can be entered in the course of visiting our website, we use the widespread SSL method (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. Generally speaking this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether or not an individual page of our website is encrypted or not by the fact that the lock symbol in the bottom status bar of your browser is shown to be closed.
We also apply suitable technical and organisational security measures to protect your data from random or deliberate manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are improved on an ongoing basis in line with technological developments.
12. Validity and changes to this Data Privacy Statement
This Data Privacy Statement is currently valid as of September 2020.
As a result of the enhancement of our website and offers published on the website or due to changes in specifications as required by law or by the authorities, it may be necessary to change this Data Privacy Statement. The currently valid Data Privacy Statement can be accessed by you at any time on this website and printed out.
info@rieber.de
