Data Protection Declaration

DATA PROTECTION INFORMATION

We thank you for your interest in our website. The protection of your personal data during its collection, processing and use when you visit our homepage is an important aspect as far as we are concerned. Your data are protected in the scope of the statutory provisions. Please take a moment and read the following information. This informs you on how we handle your personal data, how and for which purpose we use this data, who we pass this data on to and how we protect your personal data. Your privacy rights are of the highest priority as far as we are concerned, and we do all in our power to protect and safeguard these rights.

1. Controller

The controller as defined in Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is:

A. RAWIE GmbH & Co. KG
Dornierstraße 11
49090 Osnabrück
GERMANY
T +49 (0) 541 912 0 70
F +49 (0) 541 912 0 710
schrankenbau@rawie.de
prellbockbau@rawie.de
www.rawie.de

2. Contacting the Data Protection Office

You can contact our data protection officer here:

Markus Dettmer
A. RAWIE GmbH & Co. KG
Dornierstraße 11
49090 Osnabrück
Deutschland
datenschutz@rawie.de

or at our postal address with the addition “der Datenschutzbeauftragte”.

3. Collection of Personal Data when you Visit our Website

If you access our website, we automatically record information of a general nature. This information (server logfiles) includes the following for example:

• IP address
• date and time of the request
• time zone difference from Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/http status code
• data volume transferred in each case.
• website that the request comes from
• browser
• operating system and its surface
• language and version of the browser software.

They are especially processed for the following purposes:

• ensuring a trouble-free connection set up of the website
• ensuring a trouble-free use of our website
• analysis of the system security and stability, and
• other administrative purposes.

These purposes also include our justified interest in the data processing. We do not use your data in order to draw conclusions regarding your person. We possibly use this information in order to statistically analyse them in order to optimize our website and the technology that is behind it.

The processing is carried out on the basis of our justified interest in the improving of the stability and functionality of our website conform with Art. 6 para. 1, letter f) GDPR. The recipients of the data are technical service providers that are responsible for the operating and maintenance of our website in their capacities as processors. The data shall be erased as soon as they are no longer required for the purpose of the collection. This is generally the case after the session concerned has been terminated.

Neither is the provision of the aforementioned personal data statutory stipulated nor is this contractually stipulated. The service and functioning of our website cannot be warranted however without the IP address. It is also the case that isolated services are not available, or they can be restricted. An objection is excluded on these grounds.

4. General Information on the use of Cookies and other Technologies

As is the case with a large number of other websites, we use so-called “cookies“. Cookies are small text files that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website so that the user experience can be more efficient.

We can store cookies on your device as long as this is absolutely necessary for the operation of this site. The use of these technically necessary cookies has the purpose of making the use of the website easier for the user. The processing is carried out on the basis of our justified interest in a user-friendly design of our website conform with Art. 6 para. 1, letter f) GDPR. Neither is the provision of the aforementioned personal data statutory stipulated nor is this contractually stipulated. The service and functioning of our website cannot be warranted however without this data. It is also the case that isolated services are not available, or they can be restricted.

We require your consent to all the other types of cookies that might be implemented by third-party suppliers. Your active consent then forms the legal basis for this processing (Art. 6 para. 1 letter a GDPR). You can obviously look at our websites without cookies. You can generally deactivate the use of cookies with your browser settings at all times. You shall find the required information under the following links, depending on the provider of your browser:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer/Microsoft Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: https://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

You can also revoke your consent at all times using our Cookie Consent Tool here.

The recipients of the data are technical service providers that are responsible for the operating and maintenance of our website in their capacities as processors.

5. Use of Google Maps

We use the service provided by Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA94043 USE (hereafter: “Google). This enables us to display interactive maps direct on the website so that you are able to use the map function comfortably.

Detailed information on the data processing by Google is provided here: den Google-Datenschutzhinweisen. You can also change your personal data protection settings in the Data Protection Center.

The integration of Google Maps and the related data transfer to Google is your consent (Art. 6 para. 1, letter a) GDPR). This only takes place after you have started Google Maps with a „click” or you have consented in advance by clicking on our Cookie Consent banner. When you visit the website, Google is provided with information that you have opened the corresponding page on our website. This takes place irrespective of whether Google creates a user account that you have logged into from, or whether a user account does not exist. If you are logged into Google, your data shall be directly allocated to your account.

If you do not wish to have the allocation carried out in your Google profile, you have to logout from Google before you activate the button. Google stores your user profile and uses it for advertising, market research purposes and/or for a needs-oriented designing of its website. Such an analysis especially takes place (even for users that are not logged in) for the provision of needs-oriented advertising and in order to inform other users of the social network of your activities on our website. You have a right of objection regarding the creation of these user profiles, whereby you have to contact Google in order to exercise this right.

Rawie does not itself collect any personal data as a result of the integration of Google Maps.

If you do not want Google to collect, process or use your personal data as a result of your use of our website, you can always deactivate JavaScript in your browser settings. In this case, you shall be unable to use our website, or this shall only be possible to a restricted extent. You can also revoke the data transfer to Google in our cookie settings here.

Provision of mandatory or necessary data: The provision of your personal data is made voluntarily, this merely being on the basis of your consent. Should you prevent the access, this can result in restricted functions on our website.

6. Making Contact

The data that you enter is stored so that we can individually communicate with you. This necessitates the provision of a valid email address. The entering of your name is not necessary, but it helps us to match the request and respond to the same. The entering of additional data is optional.

The processing of the data that is entered in the contact form is carried out on the basis of a justified interest (Art. 6 para. 1, letter f GDPR). We make the contact form available so that we can contact you in an uncomplicated manner. The information you provide is stored for the purpose of processing the request and should there be any follow-up questions. Should you contact us in order to request an offer, the data that is entered in the contact form is processed in order to implement pre-contractual measures (Art. 6 para. 1, letter b GDPR).

It is possible that our IT service providers process data in non-EU Member States, for which an adequacy decision has not been made by the EU Commission. If necessary, we conclude EU standard contract clauses with these service providers in addition to us providing additional warranties in order to protect your data at the same level as is valid in the European Union, conform with EJC decision C-311/18 (Schrems II decision). You can be granted access to corresponding documents through our Data Protection Officer. Such are not forwarded to third parties.

Your data are erased 6 months after processing of the request at the latest. Should we conclude a contract, we are subjected to the statutory periods of storage as stated in the German Commercial Code (HGB) and we shall then erase your data after these periods have expired. We are only able to process your request however, if you provide us with your name, your email address, and the reason for your request.

7. Processing of your Data in the Scope of the Business Communication and the Processing of Business Transactions

We collect and process your data so that we can communicate with you in business matters. This can be in order to initiate business or in order to meet contractual and statutory liability, offer products and services, and in order to reinforce the customer relationship, in which we have a justified interest in the data processing. Without your personal data, we are often unable to achieve the above purposes. The following legal bases can have validity for the processing of your data:

• in order to implement pre-contractual measures or in order to fulfil a contract, this is Art. 6 para. 1, letter b) GDPR;
• in order to meet legal obligations that we are subjected to, this is Art. 6 para. 1, letter c) GDPR;
• in order to safeguard our justified interests, this is Art. 6 para. 1, letter f) GDPR;
• should you have consented to the processing of your data, this is Art. 6 para. 1, letter a) GDPR.

Within our company, we ensure that only those persons are able to access your data that require such for the fulfilment of the contractual and statutory duties. These are transferred to partners and manufacturing companies for the purpose of fulfilment of a contract. Examples are parcels services, banks, Internet service providers, IT service providers and tax consultants. It is possible that our IT service providers process data in non-EU Member States, for which an adequacy decision has not been made by the EU Commission. If necessary, we conclude EU standard contract clauses with these service providers in addition to us providing additional warranties in order to protect your data at the same level as is valid in the European Union, conform with EJC decision C-311/18 (Schrems II-Decision). You can be granted access to corresponding documents through our Data Protection Officer. Such are not forwarded to third parties.

Your personal data are generally erased or blocked as soon as the reason for the storage no longer exists. The purpose is stated in the contents of the communication and the business transaction concerned. It is not possible to determine the storage periods in general terms, this having to be calculated on a business transaction by business transaction case. The storage normally takes place in order to act in accordance with commercial law and fiscal law storage periods (normally six or ten years), as long as longer storage period should not be necessary in order to provide defence against legal claims. An obligation that you are to provide your personal data can result from the respective contractual relationship.

8. Your Rights

You have the following rights towards us with regard to your personal data:

• right to information, Art. 15 GDPR;
• right to rectification or erasure, Art. 16 GDPR, Art. 17 GDPR;
• right to a restriction of processing, Art. 18 GDPR;
• right to object to the processing, Art. 21 GDPR;
• right to data portability, Art. 20 GDPR.

Should you have granted us consent, you can revoke this with effect for the future. You can always file a complaint with a supervisory authority, e.g., with the responsible supervisory authority in the German federal state in which your place of abode is located or the authority that has responsibility for us as the responsible body. You shall find a list of the supervisory authorities (for the non-public area) with the address at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

9. Use of various Social Networks

Rawie has corporate profiles on diverse social networks that currently comprise Facebook and Instagram. These serve to advertise the company and create communication paths for interested persons and customers. Some links to these are provided on the website.

Should you use our profiles in social networks in order to contact us (by creating your own contributions, reacting to ours or by sending us a private message), the data you provide us with are exclusively processed so that we can contact you in order for us to process your concerns.

We wish to point out however, that when you visit our profiles in the aforementioned networks, the operator of the social network concerned collects, uses, and stores your personal data. This is also the case should you not have your own profile in the social network concerned. The individual data are not transparent for us. It is can therefore not be excluded that your data can be processed by the provider of the platform concerned for market research and advertising purposes. It is possible for example, that the usage behaviour and the resulting interests of the user can be used for the creation of user profiles. Such user profiles can in turn be used in order to place advertisements on and outside the platforms concerned for example, when such presumably meet the interests of the user. Data concerning the devices that are used by the users and location data and other so-called metadata can also be stored in the user profiles. It is normally the case that cookies, etc. are stored on the computer of the user, it then being possible to store the usage behaviour and the interests of the user in them. The majority of the platforms also use so-called tracking pixels.

We refer to the linked information provided by the provider concerned in connection with opt-out possibilities:

Additional information concerning the Facebook fanpage: as the operator of a Facebook fanpage. we are only able to see the information that you have stored in your public Facebook profile, and this is also only possible if you have such a profile, and you are logged into it when you download our fanpage. Facebook also provides us with anonymous user statistics that we use in order to improve your user experience when you visit our fanpage. We do not have access to the individual user data of the visitor that Facebook uses in order to generate these statistics. We also do not make any decisions concerning the processing of insight data and all other information pursuant to Art. 13 GDPR, including the legal basis, the identity of the controller and the duration of the storage of cookies on terminal devices. Facebook has obligated itself towards us to assuming primary responsibility for the processing of this data pursuant to the GDPR and to substantially making this obligation available to the data subject (see https://www.facebook.com/legal/terms/page_controller_addendum).

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data Protection Declaration: https://www.facebook.com/about/privacy/
Information on insight
data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Data Protection Declaration: https://instagram.com/about/legal/privacy/

Legal basis
Communication data: the following communication possibilities exist regarding the processing of your data, depending on the contact phase:

• in order to implement pre-contractual measures or in order to fulfil a contract, this is Art. 6 para. 1, letter b) GDPR;
• in order to meet legal obligations that we are subjected to, this is Art. 6 para. 1, letter c) GDPR;
• in order to safeguard our justified interests, this is Art. 6 para. 1, letter f) GDPR;
• should you have consented to the processing of your data, this is Art. 6 para. 1, letter a) GDPR.

Other processing: the other data processing that takes place in the social networks, serves both our justified interest and that of the provider concerned in improving the user experience when our corporate profile is visited. The legal basis for the data processing is therefore Art. 6 para. 1, letter f) GDPR. Should the user be requested by the corresponding provider of the platform that he consent to the data processing described above, then the legal basis for the processing is Art. 6 para. 1, letter a) GDPR.

Duration of storage: we erase stored data as soon as their storage is no longer necessary and if you should request their erasure. In the event of statutory storage periods being applicable (normally six or ten years), we restrict the processing of the stored data respectively as long as a longer storage is not necessary in order to provide defence against legal claims.

Recipient: We do not transfer the data we collect from you to third parties. We are however unable to exclude and have no influence on the extent to which the operator of the networks concerned forward your data to third parties (e.g., business partners, advertising companies, etc.).

Transfer to non-EU member states: We wish to point out that data from visitors to social networks can also be processed outside the area of the European Union. This can pose a risk to users as it could make the enforcement of the user rights more difficult, for example.

Your rights as a data subject: In addition to the „Your Rights as a Data Subject“, we wish to point out that your rights, especially information requests, can be most effectively addressed to the providers. Only the providers are able to access the user data and can take corresponding measures direct and also provide information. Please contact us should you nevertheless require assistance.

10. Protecting the Stored Data

We implement technical and organizational security measures in order to protect the personal data you make available, from manipulation, loss, destruction, or access by unauthorised persons. Our security measures are continually improved and adapted in keeping with the latest state of the art. It cannot be excluded that unencrypted data that is made available, can also be seen by third parties. You are hereby informed that a secure transfer of data via the Internet (e.g. communication via email) cannot be ensured. Sensitive data should therefore either not be transferred or they should be transferred using a secure connection (SSL).

11. Use of Processors for the Operation of the Website

The website is technically supported by processors. This means that all of the personal data can also be transferred to them. The contractors are a host provider and a CMS (Content Management System) provider. The website is operated with the integration of the external service.