We look forward to your visit to our website and thank you for your interest in our company. The protection of your personal data is very important to us. Rudolf Riester GmbH adheres to the rules of data protection, in particular to the provisions of the EU General Data Protection Regulation (GDPR). Your personal data will only be processed if you have given your consent, if the data is necessary for the performance of a contract, or if the GDPR or another law permits or prescribes the processing.
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes information such as the name, address, telephone number and date of birth. Since these data receive special protection, they are collected only to the extent that it is technically necessary.
1. Contact details responsible authority and data protection officer
1.1 Responsible authorities
Rudolf Riester GmbH
Tel: (+49) +74 77-92 70-0
Fax: (+49) +74 77-92 70-70
1.2 Data Protection Officer
The data protection officer can be reached at the above-mentioned address or at firstname.lastname@example.org
2. Purposes of processing
2.1 Consent (Art. 6 para. 1a GDPR), revocation of consent
Processing of personal data for specific purposes (e. g. sending our newsletter by email after clicking on the confirmation link we send to you, forwarding to other third parties, and analysing data for marketing purposes only occurs, if you have given us your consent. You can revoke your consent at any time. Please contact us for further information. Please note that your revocation is only applicable for future visits.
2.2 Contractual or pre-contractual obligations (Art. 6 para. 1b GDPR)
We process personal data required for the performance of a contract of which you are a contracting party or for the performance of pre-contractual measures that are based on your request, e.g. via our website contact form. The purpose of data processing is based on the specific contract (e. g. purchase, delivery, employment contract) and may include, among other things, evaluations, advice and the implementation of other actions. As part of your application, the data provided by you (e.g. cover letter, curriculum vitae, certificates), which we need in order to make a decision about hiring in our company, is processed in the departments that participate in the application process here (e.g. personnel department, department head). We process personal data of employees for employment purposes if this is necessary to decide on the establishment of an employment relationship or after the establishment of employment, for its execution or termination, or for the exercise or fulfilment of the rights and obligations arising from a law.
2.3 Legal requirements (Art. 6 para. 1b GDPR)
Due to a legal obligation, data processing takes place, for example for purposes of fraud and money laundering prevention, fulfilment of tax control and reporting obligations and information to authorities.
2.4 Balance of interests (Art. 6 para. 1b GDPR)
Furthermore, data processing occurs for the protection of legitimate interests of this company or third parties for specific purposes after prior balancing of interests, e.g to secure the domiciliary right, protection of legal claims, investigation of criminal offences, determination of default risks, optimised product development, optimised customer approach for advertising purposes such as telephone contact to other companies, postal delivery of promotional information (e.g. invitation to functions and events, presentation of new products and services), optimised requirement planning, or to ensure data security.
3. Further data processing in the context of website use
3.1 Contact form
The data recorded via our contact form will only be used to process inquiries received through the contact form. After processing the request, the collected data will be deleted.
3.2 Request for information on selected products
You have the option of selecting certain products from our website. You can place the products you have selected in our shopping cart. If you click on the shopping cart, you can send us an inquiry about the selected products via a contact form. For this we need your email address. Further personal information can be provided voluntarily; the processing of this data takes place with your consent. The data collected for the use of the information request will be deleted after your request has been processed. In addition, your product selection will be saved on your hard drive by means of a cookie for the duration of your visit to our website. After closing the browser window, the cookie is automatically deleted (session cookie). For more information about cookies, please refer to point 3.4.
3.3 Login for registered users
After registering on a login form, we offer customers the use of an internal area. Registered users can call up various documents in the internal area. We use the data collected to complete registration for the use of the internal area as well as the data resulting from that use only for the purpose of retrieving internal documents.
3.4 External content / processing of data outside the EU
3.6 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (hereafter: Google). Google Analytics uses so-called 'cookies' that are text files stored on your computer to enable the analysis of your website use. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google ensures that if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. Google ensures that the IP address provided by Google Analytics within your browser will not be merged with any other data provided by Google. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that in this case you may not be able to use all functions of this website. You may also prevent Google's recording of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as its processing of this data. Download the link below https://tools.google.com/dlpage/gaoptout?hl=de and install the available browser add-on.
For more information, see https://policies.google.com/privacy?hl=de (general information about Google Analytics and privacy).
Please note that on this website Google Analytics was expanded by the code gat._anonymizeIp(), to guarantee an anonymous collection of IP addresses (so-called IP masking).
3.7 Anonymous or pseudonymous usage possibilities
You can always visit our websites without giving us personal data. Pseudonymised usage data are not merged with the data of the bearer of the pseudonym. A creation of pseudonymous usage profiles does not take place.
4. Categories of recipients
In order to fulfil the intended purposes, there is interdepartmental access within our company to the respectively required data. Likewise, as part of a balance of interests, an inter-site data exchange may take place within the Halma Group, to which we belong. A current overview of the branches can be found here: http://www.riester.de/de/kontakt/ Our contract processors may also receive data for specific purposes, e.g. for IT services, document destruction and marketing. Other recipients of personal data may also be e. g. public authorities, credit and financial services institutions, lawyers and accountants or credit bureaus.
5. Transmission to a third country or to an international organisation
A data transmission in third countries takes place only if this is required, for example, for the execution of a contract or by law, you have given us your consent, or in the context of a group data transfer after balancing of interests. In addition, as part of the maintenance of IT components, it cannot be ruled out that an IT service provider from a third country (e. g. USA) could in rare cases obtain access to personal data. Otherwise, there will be no transfer of personal data to third countries or to an international organisation.
6. Duration of data storage
For the duration of the contractual relationship, the personal data are stored with us; furthermore, statutory limitation periods generally last three years. After completing an application selection process, we will generally delete your information within 3 months unless you are hired by our company. There are different storage and documentation requirements, for example, from the Commercial Code (HGB) and the Tax Code (AO), which can last up to ten years.
7. Right to information, correction, deletion, restriction, data portability, existence of a right of appeal
You have the right to information according to Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR and the right to data portability from Art. 20 GDPR.
In addition, you have the right of appeal to a data protection supervisory authority (Art. 77 GDPR).
8. Obligation to provide data
You will only need to provide the personal information necessary to create, conduct and terminate a contract, or which we are required to collect by law. If you do not provide us with the necessary information and documents, we may not enter into or continue your desired business relationship.
9. Automated decision-making in individual cases
In principle, we do not use fully automated decision-making to justify and execute the business relationship. If we use these procedures in individual cases, we will inform you about this separately, if required by law.
We sometimes process your data automatically with the aim of evaluating certain personal aspects (profiling), e.g. evaluation for targeted customer approach, needs-based advertising including market and opinion research as well as for scoring or rating. In the evaluation, for example, data on payment behaviour (e. g. account sales, balances) as well as criteria such as industry affiliation and experience from the previous business relationship can be of influence.
11. Categories of personal data
We process the following categories of personal data, for example: personal master data, contract master data, contract implementation and termination data, order data, data to fulfil legal obligations, creditworthiness data, scoring / rating data, advertising and sales data, data about your use of our offered telemedia (e.g. time of the visit to our web pages) as well as other data comparable to the mentioned categories.
12. Data sources
We process data that we have received from you in the framework of our business relationship as well as data lawfully transmitted to us by other third parties. We also collect data from publicly available sources (e. g. trade and debtor directories, commercial registers, press).
Information about your right to object according to Art. 21 General Data Protection Regulation (GDPR)
Case-specific right of objection
You have the right to object, for reasons that arise from your particular situation, at any time to the processing of your personal data, which occurs based on Article 6 para. 1e GDPR (data processing in the public interest) and Article 6 (1f) of the GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision. If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or that serve to assert, exercise or defend legal claims.
Right to object to the processing of data for direct marketing purposes
We process your personal data in order to operate direct mail. You have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be free of form and should be directed if possible to:
Rudolf Riester GmbH
Fax: (+49) +74 77-92 70-70