Privacy protection policy according to the GDPR

 

I. Name and address of the data controller

 

Roos GmbH

Aindlinger Str. 7 ½

86167 Augsburg

Deutschland

Tel.: 08217 486 881 0

E-Mail: info@roos.gmbh

Website: www.roos.gmbh

 

is the data controller as defined in the EU General Data Protection Regulation (GDPR) and the national data privacy laws.

 

II. Name and address of the data protection officer

 

If you have any questions regarding the processing of your personal data, you can contact the controller. For this purpose, you can contact us by e-mail at datenschutz@roos.gmbh or by telephone (0821) 74 86 88-0 or by post at Aindlinger Str. 7 ½, 86167 Augsburg.

 

III. General information about data processing

 

1. The extent to which personal data is processed

 

We collect and use the personal data of users of our homepage only to the extent that this is necessary for keeping our website, contents and services functioning properly.

 

Basically, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing the data by statutory provisions is permitted or when obtaining prior consent for actual reasons is not possible.

 

2. Legal basis for processing personal data

 

The legal basis for processing personal data is basically based on:

 

  • Art. 6 para. 1 s. 1 lit. a GDPR upon obtaining the consent of the data subject.
  • Art. 6 para. 1 s. 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary to carry out pre-contractual measures.
  • Art. 6 para. 1 s. 1 lit. c GDPR for processing required to fulfill a legal obligation.
  • Art. 6 para. 1 s. 1 lit. d GDPR, if vital interests of the data subject or another natural person require the processing of personal data.
  • Art. 6 para. 1 s. 1 lit. f GDPR, if the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest.

 

3.  Data erasure and storage duration

 

The personal data of users will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Additional storage may be provided for by European or national legislators through EU regulations, laws or other regulations to which the data controller is subject. Blocking or deleting the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for additional storage of the data for concluding a contract or fulfilling the contract.

 

IV. Use of our website, general information

 

1. Description and scope of data processing

 

Every time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is collected:

 

(1) Browser type and browser version

(2) Operating system used 

(3) Referrer URL 

(4) Host name of the accessing computer 

(5) Time of the server request

 

The data described - with the exception of the user’s IP address or other data that allows data to be assigned to a user - are stored in our system’s log files. This data is not stored together with any other personal user data.

 

2. Purpose and legal basis for data processing

 

Our system must temporarily store user IP addresses to allow us to deliver our website to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

 

The legal basis for the temporary storage of data is Art. 6 para. 1 s. 1 lit. f GDPR. 

 

Collecting your personal data to ensure our web presence and is essential for operating our website.

A contradictory possibility of the user therefore does not exist.

 

3. Duration of storage

 

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your data will be deleted when the session ends if your data has been collected to ensure the site's availability.

 

V. General information about the use of cookies

 

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If you display a website; this is how a cookie can be stored on your operating system. This cookie contains a characteristic string that allows the browser to be clearly when the website is accessed again.

 

We use cookies to make our homepage more user friendly. Some elements of our website require that the browser be identified even after a page break.

 

The following data is stored and transmitted:

 

(1) Language settings

 

We would like to point out that some functions on our website can only be offered if cookies are enabled.

We do not use user data collected by technically required cookies to create user profiles.

 

The legal basis for processing personal data using cookies is defined in Art. 6 para. 1 s. 1 lit. f GDPR. The purpose for using technically required cookies is to simplify the use of our website.

 

Cookies are stored on the user’s computer, which transmits them to our page. As a user, you therefore have control over the use of cookies. You can restrict or disable transmission of cookies by making changes to your Internet browser settings. Here you can also delete cookies that have been stored. Please note that you may not be able to use all the features on our website if you deactivate cookies. 

 

As part of our Cookie-Richtlinie (by clicking the relevant link in the footer of our page) you can view and adjust the relevant cookies.

 

VI. Your rights/rights of the data subject

 

According to the EU General Data Protection Regulation, as an affected party you have the following rights:

 

1. The right to receive information

 

You have the right to receive from us as data controller the information whether and which personal data concerning you are processed by us as well as further information in accordance with the legal requirements pursuant to Art. 13, 14 GDPR.

 

You can claim your right to information under: datenschutz@roos.gmbh

 

2. The right to rectification

 

If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed. The correction will be made immediately.

 

3. Right to restriction

 

You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 GDPR).

 

4. The right to delete

 

If the conditions set out in Article 17 of the GDPR apply, you may request that the personal data relating to you be deleted without delay. 

 

We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 para. 3.

 

5. Right to information

 

If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients.

 

6. Right to data portability

 

According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format or to request its transfer to another controller.

 

7. Right to revoke the declaration of consent to data protection

 

You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the processing carried out based on the consent until the revocation goes into effect.

 

8. Right to objection

 

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 s. 1 lit. e or f GDPR.

 

9. Automated decision on an individual basis, including profiling

 

Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing - including profiling - which would have legal effect or would affect you in a similar manner. 

 

10. Right to complain to a supervisory authority

 

Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to complain to a supervisory authority, in the Member State of its place of residence, employment or the location of the alleged infringement.

 

VII. Data transfers to third countries (outside of the EU):

 

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is being processed. Within some exceptions we may process personal data outside the EU through third-party services. This may only be the case where the special requirements in accordance with Art. 44 et. seq. GDPR are fully met. This means that the processing of your data may then only take place when the third country has been declared to ensure an adequate level of protection by the European Commission or if the European Standard Contractual Clauses have been signed. 

 

VIII. Newsletter

 

1.  General

 

You can subscribe to a free newsletter on our homepage that we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

 

The data you enter in the online registration form will be transmitted to us.

 

We collect the following data based on the consent obtained during the registration process:

 

(1) Salutation 

(2) Last name

(3) E-Mail

 

Furthermore, the following data is stored at the moment of transmission:

 

(1) IP address of the calling computer.

(2) Date and time of registration.

 

Your data will not be forwarded as part of data processing involved in sending newsletters.

The data will be used exclusively for sending the newsletter.

 

2. Double opt-in and logging

 

Registration for our newsletter takes place in a so-called double-opt-in procedure. After registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that nobody can register using external email addresses.

 

The registration for the newsletter will be logged to prove the registration process according to the legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address.

 

3. Legal basis

 

Legal basis for processing the data is once the consent of the user Art. 6 para. 1 s. 1 lit. a GDPR has been submitted. Collecting the user's email address aids in delivering the newsletter.

 

4. Cancellation, revocation and opposition

 

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your email address will therefore be saved as long as the subscription to the newsletter is active. You may terminate subscription to the newsletter at any time by revoking your consent. There is a corresponding link in each newsletter to do this.

 

We would like to further point out that at any time, you are free to cancel any future processing of your personal data in accordance with the statutory requirements. pursuant to Art. 21 GDPR. You are free to object to your data being processed for direct marketing purposes.

 

5. Shipping provider

 

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data entered by you for the purpose of receiving newsletters (e.g. e-mail address) are stored on the servers of CleverReach in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit:

https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

 

The data processing is based on your consent (Art. 6 para. 1 s. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

 

If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. Furthermore, you can also unsubscribe directly on the website.

 

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you have unsubscribed from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

 

For more details, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

 

We have concluded an data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

 

IX. Electronic contact

 

If you would like to contact us electronically, this possible by contacting us via our provided email address. In this case, the user's personal data transmitted by email will be stored.

 

The following data is also stored once the message has been sent:

 

(1) The user’s IP address

(2) Date and time of registration

 

A transfer of your data to third parties will not take place in this context; this data will be used exclusively for processing the communication record.

 

The legal basis for processing the data is in submitting user consent as defined in Art. 6 para. 1 s. 1 lit. a GDPR. The legal basis for processing the data transmitted while sending an email is Art. 6 para. 1 s. 1 lit. f GDPR. If the email contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 s. 1 lit. b GDPR.

 

Processing personal data in this context is solely for processing the contact. In the case of contact via email, this also includes the required legitimate interest in processing the data.

 

If further personal data are processed during the sending process, then they serve only to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Regarding the personal data from the input form on the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

 

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

 

You will have the opportunity to revoke your consent to the processing of personal data at any time. Even when contacting us by email, you can object to the storage of your personal data at any time. However, we would like to point out that in such a case, the conversation cannot continue. All personal data stored while contacting will be deleted in this case.

 

X. Career Portal

 

On this website, we display job offers to which interested parties can apply by e-mail. Initiative applications can also be sent to us by e-mail. In the event of an incoming application, we process the data received from the applicant exclusively for the purpose of processing for the potential filling of the vacant position.

 

The primary legal basis for this is Art. 88 GDPR in conjunction with Sec. 26 para. 1 BDSG.

 

Within our company, your personal data is only accessed by those persons who are responsible for processing the application procedure and who are the decision-makers regarding the outcome of the application.

 

We delete your personal data as soon as they are no longer required for the above-mentioned purposes. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted no later than six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion.

Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

 

Your personal data will not be passed on to third parties.

 

XI. Surveys

 

As a follow-up to successfully completed orders, we provide you as a user with a survey via e-mail at regular intervals. If you click on the corresponding link within the e-mail, you will be forwarded to our survey page, where you can then take part in the survey. By means of this survey we want to improve our offer and our products on the basis of your satisfaction. You can object to participation in the surveys and to receiving further e-mails at any time.

 

The following data will be linked to the previously stored data from your profile when you participate:

 

- Satisfaction on a scale

 

- Comments (optional)

 

- Name (optional)

 

- E-mail address (optional)

 

Furthermore, the following data will be saved when submitting the survey:

 

- IP address

 

- Date and time of the sending process

 

Your data will not be passed on to third parties in this context; the data will be used exclusively for evaluating the survey. The legal basis for offering the surveys and linking the data provided with a profile is our legitimate interest pursuant to Art. 6 para. 1 s. 1 lit. f GDPR in conjunction with. Sec. 7 para. 3 UWG.

 

The personal data collected during the submission process is only used to prevent misuse of the survey and to ensure the security of our information technology systems. This additionally collected data will be deleted after a period of four weeks at the latest.

 

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the survey, this is the case when the evaluation of the survey has taken place. You also have the option to withdraw your consent to the processing of the data provided in the survey before this time. To do so, you must send an e-mail to the following address: datenschutz@roos.gmbh

 

XII. Web analytics

 

1. Google Analytics

 

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). When Google Analytics is used, the data processing is technically provided by Jimdo. In this respect, reference is hereby made to Jimdo's privacy policy. Jimdo GmbH (Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg Datenschutz@jimdo.com) and the operator of this website bear a joint controllership for data processing in connection with Google Analytics on this website.

 

Google Analytics uses so-called "cookies," text files that are stored on your computer and they allow how you use the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and is stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

 

On behalf of Jimdo and the Site Operator, Google will use the information collected for the purpose of evaluating your use of the Website, compiling reports on website activity and providing other services relating to website activity and internet usage for Jimdo and the Site Operator.

 

You can prevent the storage of cookies by enabling a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as prevent Google from processing this data by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

 

This website uses Google Analytics with the extension "_anonymizeIp()." As a result, IP addresses are processed shortened so that they cannot be related to any one particular person. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded, and the personal data will be deleted immediately.

 

We use Google Analytics to analyze and regularly improve the use of our website. We use the statistics to improve our offer and make it more interesting for you as a user. The legal basis for using Google Analytics is your consent, as defined in Art. 6 para. 1 s. 1 lit. a GDPR.

 

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User conditions: http://www.google.com/analytics/terms/de.html,

Data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html

data protection policy: http://www.google.de/intl/de/policies/privacy.

 

2. Google ReCaptcha

 

Furthermore, we use the Google service reCaptcha on our website to determine whether a human or a computer makes a certain entry in our contact or newsletter form. 

 

Google uses the following data to check whether you are a human or a computer: IP address of the terminal device used, the website that you visit with us and on which the captcha is embedded, the date and duration of the visit, the recognition data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas as well as tasks in which you have to identify images. 

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 p.1 lit. f GDPR. Our legitimate interest in this data processing is to ensure the security of our website and protection against automated entries (attacks).

 

Further information on the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland can be found at https://www.google.com/policies/privacy/

Opt-out: https://adssettings.google.com/authenticated

 

XIII. Social Media

 

1. Social media presence

 

We maintain fan pages within various social networks and platforms for communicating with customers, prospects and users who are active there and for informing them about our services.

 

We would like to point out that your personal data may be processed outside the European Union, which may pose risks to you (e.g. in enforcing your rights under European/German law).

 

These users’ data are usually processed for market research and advertising purposes. Thus, for example, user profiles are created based on the user’s behavior and interests. These usage profiles can in turn be used to do such things as place advertisements inside and outside the platforms that are allegedly in line with users' interests. For these purposes, cookies are usually stored on the user’s computer where the user’s behavior and the user’s interests are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices that the users use (this is especially true if the users are members of the respective platforms and are logged in to them).

 

Processing personal user data is based on our legitimate interests in an effective user information and communication with users in accordance with. Art. 6 para. 1 s. 1 lit. f. GDPR. The legal basis for processing user info is Art. 6 para. 1 s. 1 lit. a., Art. 7 GDPR, and this entails the respective providers asking users to consent to data processing (that is, that they declare their agreement, for example, by ticking a check box or clicking on a button to confirm).

 

Additional information about processing your personal data as well as your revocation options can be found under the links for the respective providers listed below. The assertion of information and further rights of the data subjects can likewise take place opposite the offerors, who then have only the direct access to the data of the users and have appropriate information. Of course, we are available for questions and support if you need help. Providers:

 

Facebook

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data Privacy Policy: https://www.facebook.com/about/privacy/

Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

 

Twitter

Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, Data Protection Policy: https://twitter.com/de/privacy

Opt-Out: https://twitter.com/settings/account/personalization

 

YouTube (Google)

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

Data Protection Policy: https://policies.google.com/privacy

Opt-Out: https://adssettings.google.com/authenticated

 

LinkedIn

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Data Privacy Policy https://www.linkedin.com/legal/privacy-policy

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

 

2. YouTube videos

We have included YouTube videos in our online offering; they are stored on http://www.YouTube.com and are directly playable from our website. These are all included in the "extended privacy mode,” meaning that no data about you as a user will be transferred to YouTube if you are not playing the videos. The data mentioned in Section 2 will be transmitted only if you play the videos. We have no influence on this data transfer.

 

By visiting the website, YouTube receives information that you have accessed the corresponding sub-page of our website. This happens regardless whether YouTube provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or custom designing its website. This type of an evaluation is carried out (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting to you as a user.

 

We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing or the retention periods. Click the link below to receive additional information about your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy

Opt-Out: https://support.google.com/ads/answer/10261289?hl=de&ref_topic=7048998

 

3. Google Maps

We use Google Maps offer on our website. This allows us to show you interactive maps right on the website and allow you to conveniently use the map feature.

 

By visiting the website, Google receives the information that you have accessed the corresponding subpage for our website. In addition, the information referred to in Section IV of this statement will be transmitted to Google. This is done regardless whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based website design. This type of an evaluation is carried out (even for users who are not logged in) for the purpose of providing appropriate advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the formation of these user profiles, and you must contact Google to exercise this right.

 

Please refer to the provider's privacy policy for more information on the purpose and scope of the data collection and its processing by the plug-in provider. There you will also find further information about these rights as they relate to you and settings options for protecting your privacy. http://www.google.de/intl/de/policies/privacy.


lc-buttons (direkt) - diesen Eintrag nicht löschen oder verschieben!