Data privacy policy

1 General information on data processing

1.1 Processing of personal data and its purpose

Rocholl GmbH (hereinafter referred to as “we”) processes personal data of users only to the extent necessary to provide a functional website and our content and services. The following data is processed when you visit our website:

  • user’s IP address
  • browser used (type, version, language)
  • operating system used
  • user’s internet service provider
  • date and time of access to our website
  • files retrieved from our website
  • website from which the user accessed our website
  • website that the user accesses via our website

The processing and temporary storage of the IP address is necessary to allow the website to be transmitted to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enable the user to be identified. Data is stored in log files to ensure the functionality of the websites. The data is also used to optimize our websites and to ensure the security of our information technology systems.

Any personal data is exclusively processed for the purposes stated herein and to the extent necessary to achieve these purposes. This data is not used for the purposes of advertising, customer advice or market research.

1.2 Legal basis for the processing of personal data

As a rule, the personal data of our users is only processed once they have given their consent. An exception applies to cases in which prior consent cannot be obtained for factual reasons and we are permitted to process the data by law. The data and log files are stored on the basis of Art. 6 (1) point (f) GDPR.

1.3 Data erasure and storage duration

The personal data of data subjects will be deleted or blocked by us as soon as the purpose of storage no longer applies. If data is processed for the provision of websites, the data will be deleted as soon as the respective session has ended. If personal data is stored in log files, it is deleted after 90 days at the latest. Storage beyond this period is possible if the IP addresses of the users are deleted or anonymized beforehand so that it is no longer possible to identify the client retrieving the website.

2 Cookies

We use cookies in several places on our websites. When a user accesses one of our websites, a cookie may be stored on the user’s operating system. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when our websites are called up again. The following data is stored and transmitted in the cookies:

  • Language settings

Cookies are designed to render our website more user-friendly. The processing of personal data through the use of cookies is based on Art. 6 (1) point (f) GDPR. Cookies are stored on the user’s computer and transmitted from there to our websites. Users can disable or restrict the transmission of cookies by changing the settings of their internet browser. Cookies that have already been saved can be deleted at any time. If cookies are disabled for our websites, it may no longer be possible to use all the functions of our websites to their full extent.

Cookie consent with Borlabs Cookie

Our website uses Borlabs Cookie’s cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data privacy regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as “Borlabs”).

When you access our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (1) point (c) GDPR.

 

3 Web analytics with Google Analytics:

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about the way you use the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of analyzing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data gathered about you by Google in the manner and for the purposes set out above.

4 Contact form and e-mail contact

Our website offers a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored:

  • first name
  • surname
  • e-mail
  • telephone number
  • text entered by the user in the free text box provided

In addition, the following data is stored when the message is sent:

  • user’s IP address
  • date and time of dispatch

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the email will be stored by us. The legal basis for the processing of the data is Art. 6 (1) point (a) GDPR if the user has given consent. If the personal data is transmitted in the course of sending an email, the legal basis is Art. 6 (1) point (f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the legal basis for the processing of data is Art. 6 (1) point (b) GDPR. The data is used exclusively to process the contact and the subsequent communication. The data will not be passed on to third parties in this context. The personal data from the input screen of the contact form and the data sent by email will be deleted when the respective communication with the user has ended, i.e. as soon as it can be inferred from the circumstances that the matter in question has been settled conclusively. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Users have the option to revoke their consent to the processing of personal data at any time. If users contact us by e-mail, they can object to the storage of their personal data at any time. In such a case, the contact request cannot be processed or communication cannot be continued. All personal data stored in the course of establishing the contacting will be deleted in this case.

5 Social media

– not applicable –

6 Security

Rocholl GmbH uses technical and organizational security measures to protect the personal data of users against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

7 Rights of the data subject

If Rocholl GmbH processes your personal data, you are a data subject in accordance with Art. 4 (1) GDPR and have the following rights vis-à-vis Rocholl GmbH:

7.1 Right of access

In accordance with Art. 15 GDPR, you can request confirmation from us as to whether your personal data is processed by us. If we process your personal data, you can request the following information from us:

  • the purposes of the processing;
  • the categories of your personal data processed by us;
  • the recipients or categories of recipients to whom we have disclosed or will disclose your personal data;
  • (where possible) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data is not collected from you, any available information as to its source;
  • the existence of automated decision-making, including profiling (Art. 22 (1) and (4) GDPR) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such data processing for you.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

7.2 Right to rectification

In accordance with Art. 16 GDPR, you have the right to demand that we correct and/or complete any incorrect personal data concerning you.

7.3 Right to erasure (‘right to be forgotten’)

In accordance with Art. 17 GDPR, you can demand that we delete your personal data immediately. We are obliged to delete your data immediately if one of the following reasons applies:

  • Your personal data is no longer necessary in relation to the purposes for which it was collected or processed otherwise.
  • You withdraw your consent on which we base the processing pursuant to Art. 6 (1) point (a) GDPR, or Art. 9 (2) point (a) GDPR, and where there is no other legal ground for the processing.
  • You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
  • Your personal data has been processed unlawfully.
  • The deletion of your personal data is necessary to fulfil a legal obligation under EU law or the law of the member states to which we are subject.
  • Your personal data was collected in relation to the offer of information society services referred to in 8 (1) GDPR.

If we have made your personal data public and we are obliged to erase your personal data in accordance with Art. 17 (1) GDPR, we will take reasonable steps, including technical measures, taking into account the available technology and the implementation costs, to inform the data controllers who process the personal data that you, as the data subject, have requested them to delete all links to your personal data, or copies, or replications of your personal data.

The right to erasure does not exist if processing is necessary:

  • for exercising the right to freedom of expression and information;
  • for compliance with a legal obligation to which we are subject or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
  • for reasons of public interest in the area of public health (Art. 9 (2) points (h) and (i) and Art. 9 (3) GDPR);
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • for the establishment, exercise or defence of legal claims.

 

7.4 Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data in accordance with Art. 18 GDPR:

  • if you contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data;
  • if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
  • if we no longer need your personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims; or
  • if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.

Where the processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a member state. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction of processing is lifted.

7.5 Notification obligation regarding rectification or erasure of personal data or restriction of processing

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged under Art. 19 GDPR to inform all recipients to whom your personal data has been disclosed by us of this fact, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

7.6 Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

  • the processing is based on consent pursuant to point (a) of Art. 6 (1) GDPR or Art. 9 (2) point (a) GDPR or on a contract pursuant to Art. 6 (1) point (b) GDPR and
  • the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transmitted directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

7.7 Right to object

In accordance with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

7.8 Rights to revoke the declaration of consent under data protection law

You have the right to revoke your data privacy declaration of consent to us at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

7.9 Automated individual decision-making, including profiling

In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  • is necessary for entering into, or performance of, a contract between you and us;
  • is authorized by EU or member state legislation to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • is based on your explicit consent.

7.10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you think that the processing of your personal data carried out by us infringes the GDPR.

8 Responsibility for content and information

Our websites contain links to websites of external providers. The contents of the internet offers of external providers were checked by us when the link was set to determine whether they violate civil or criminal law. However, it cannot be ruled out that these contents may be subsequently changed by the respective providers. If you are of the opinion that external pages that are linked to our website violate applicable law or contain other inappropriate content, please let us know. We will check your information and remove the external link if necessary. Rocholl GmbH is not responsible for the content and availability of the linked external websites.

9 Inclusion and validity of the privacy policy

By using our websites, you consent to the data processing described above. This privacy policy applies only to the content of Rocholl GmbH. Other data privacy and data security provisions apply to the linked external content. You can find out who is responsible for these offers in the respective legal notice.

Due to the further development of our websites or the implementation of new technologies, it may become necessary to amend this privacy policy. We therefore reserve the right to amend the privacy policy at any time with effect for the future. The version available at the time of your website visit always applies.