DATA PROTECTION NOTICE
OF ROTHO Group
We take the protection of your personal data very seriously. We therefore process your data only on the basis of statutory provisions and in compliance with the relevant data protection regulations. In this data protection notice we inform you about data processing in the context of our website (www.jive-be-organized.com).
1. Controller
Data processing on our website is carried out by the respective website operator, a company of the Rotho Group. The responsible representatives and contact details can be found in the legal notice of the website.
2. Data protection officer
You can reach the Rotho Group’s data protection officer as follows:
Rotho Advanced Solution AG
Industriestrasse Althau 11
5303 Würenlingen
Schweiz
+41 (0) 56 297 1313
info@r-as.ch
www.jive-be-organized.com
www.rotho.com
Email: datenschutz@rotho.com
Tel.: +49 351 2820 51 75
3. Data processing
3.1 General
Personal data is any data that identifies you as an individual, such as your name, address, email addresses and online identifiers.
Our users’ personal data is used in the following ways:
1. For the performance of our services
2. For the provision of technical support.
3.2 Storage Period
In principle, we only store personal data for as long as necessary to fulfil the purposes for which we collected the data. After that, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for claims under civil law, due to statutory retention obligations or there is another legal basis under data protection law for the continued processing of your data in the specific individual case.
For evidentiary purposes, we must retain contractual data in particular for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred at this point at the earliest in accordance with the standard statutory limitation period.
Even after this, we still have to store some of your data for accounting reasons. We are obliged to do so because of legal documentation obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods specified there for the retention of documents are two to ten years.“
3.3 Kontakt Formular
If you use the website for information purposes only, i.e. if you do not log in to use the website, register, or otherwise submit information to us, we do not collect any personal data other than the data that your browser transmits to enable you to visit the website. This data is:
• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Volume of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Browser software version and language.
We store this data in log files for a limited period in order to be able to analyse and troubleshoot any technical problems. The legal basis for this processing is Art. 6 (1)(b) DSGVO, insofar as the page view occurs in the course of the initiation or execution of a contract, and otherwise Art. 6 (1)(f) DSGVO due to our legitimate interest in enabling the website view as well as permanent functionality and security of our systems.. Due to the nature of the internet, this data is inevitably processed on a large number of servers before your request reaches our web server; therefore, it is possible that the data may also be collected and used in “third countries” (such as the US). Our company has no influence on this process. These technical limitations aside, the provider of this website does not transfer personal data to countries outside the scope of the EU General Data Protection Regulation or to countries without an adequate level of data protection.
In addition to simply using our website for information purposes, we offer various services which you can use if you are interested. This will usually require you to provide further personal data that we will use to provide the service. Where it is possible to provide additional voluntary information, this is indicated.
3.4. Contact form
If you contact us using the form on the website or by email, we will store your email address, name, address, telephone number and any other data you provide in order to respond to your enquiry. We respond to enquiries by unencrypted email. We will erase your data 6 months after you contact us, unless there is a need to retain it for a longer period. Where statutory retention periods apply, the data will be blocked.
The legal basis for this processing is Art. 6 (1)(b) GDPR, insofar as your information is required to answer your enquiry or to initiate or execute a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest that you contact us and that we can answer your enquiry. If you are not an existing customer, we will only send you promotional e-mails on the basis of your consent. In these cases, the legal basis is Art. 6 (1)(a) GDPR.
4. Passing on data; international dimension
4.1 Within the Rotho Group
The transmission of personal data within the companies of the Rotho Group takes place for internal administrative purposes of central customer care and order processing. The recipients of the personal data for processing are the companies of the Rotho Group, in particular Rotho Kunststoff AG in Würenlingen (Switzerland) and our production sites in Poland. The Rotho Group uses internal guidelines to oblige its companies to implement technical and organisational measures to ensure the security of data processing.
4.2 To Third Parties
We only share personal data with third parties with your consent, if required to fulfil our contractual obligations to you or in case there is a legal obligation to do so.
4.3 Data transfer to third countries
As explained in this privacy policy, we use services whose providers are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the transfer of data on exceptions to Art. 49 DSGVO, in particular your express consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.
If a third country transfer is provided for and there is no adequacy decision or suitable guarantees, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it, and that enforceability of your data subject rights cannot be guaranteed. When obtaining your consent via the consent banner, you will also be informed of this.
5. Cookies
These web pages use co-called cookies. Cookies are small text files consisting in particular of a name, a value, the storing domain and an expiry date that are stored on your computer and saved by your browser.
We use cookies to identify you on subsequent visits if you have an account with us. Otherwise you would have to log in each time you visit. We use tools necessary for website operation based on our legitimate interest pursuant to Art. 6 (1) Section 1 (f) GDPR in order to provide the basic functions of our website. In certain cases, these tools may also be necessary for the performance of a contract or for the implementation of pre-contractual measures, in which case the processing is carried out in accordance with Art. 6 (1) Section 1(b) GDPR. Access to and storage of information in the terminal device is absolutely necessary in these cases and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to Section 25 (2) TTDSG.
We use all other non-essential (optional) tools that provide additional functions on the basis of your consent pursuant to Art. 6 (1) Section (a)DSGVO.
This website uses cookies to the following extent:
• Non-persistent cookies (temporary use)
• Persistent cookies (time-limited use)
• Third-party cookies (from third-party providers).
Non-persistent cookies are automatically deleted when you close your browser. In particular, this includes session cookies. These store a so-called session ID, with which different requests from your browser can be assigned to the common session. This allows your device to be recognised when you return to the website. Session cookies are erased as soon as you log out or close your browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings as you wish and, for example, refuse the acceptance of third-party cookies or all cookies. However, we would like to point out that you may then not be able to use the full functionality of this website.
This information is stored separately from any other data you may provide to us. In particular, there will be no link between the cookie data and your other data.
You can set your browser in such a way that it either informs you about the placement of cookies and only allows cookies in individual cases or it prevents your browser from accepting cookies in certain cases or generally, or you can activate the automatic deletion of cookies when the browser is closed. Disabling cookies may restrict the functionality of this website. We also explain in which cases we obtain your voluntary consent to use the cookies and how you can revoke it.
6. Analytics services
6.1 Purpose of the analytics tools
We have integrated analytics tools into our websites for marketing purposes and to help us optimise our products and services. The data referred to in Section 3.2 is transferred for this purpose. The legal basis for this is Art. 6 (1) Sentence 1(a) GDPR.
6.2 Google Analytics
Our websites use Google Analytics, a web analytics service provided by Google Inc, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies, which are text files placed on your device, to enable the analysis of how you use the website. The information generated by the cookie about the use of this website is usually transmitted to and stored by Google on a server in the Netherlands. However, within EU Member States or in other member states of the European Economic Area, Google will shorten your IP address before transmitting it.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website and internet usage for the website operator. The data will not be passed on. Nor will any data from other sources be associated with the data collected.
Data processing with Google Analytics on our website is based on Art. 6(1) Sentence 1(a) GDPR. Your consent is freely given and you can withdraw it at any time with effect for the future by changing your current settings in our cookie banner.
You may also prevent the storage of cookies by selecting the appropriate settings in your browser.
Furthermore, you can prevent the recording of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available via this link.
More information on how Google Analytics handles user data can be found in Google’s privacy policy.
We have made the following data protection settings for Google Analytics:
• IP anonymisation (shortening of the IP address before analysis);
•Automatic deletion of old visit logs by limiting the storage period to 2 months;
• No resetting of the retention period in case of new activity;
• Deactivation of the collection of exact location and position data;
• Disable collection of accurate device data;
• Disabled advertising functionality (including audience remarketing through GA Audience);
• Disabled remarketing;
• Disabled cross-device and cross-page tracking (Google Signals);
• Disabled data sharing with other Google products and services; Benchmarking; Technical support; Account manager.
The following data is processed by Google Analytics:
• IP address;
• User ID, Google ID (Google Signals) and/or device ID;
• Referrer URL (previously visited page);
• Pages visited (date, time, URL, title, duration of visit);
• Events and occurrences (e.g. scrolling activity, files downloaded, links clicked to other websites, interaction with videos and forms, search queries);
• Achievement of specific goals (conversions), if applicable;
• Technical information: Operating system; browser type, version and language; device type, brand, model and resolution;
• Approximate location (country and city, if applicable, based on anonymised IP address).
Google Analytics sets the following cookies for the specified purpose with the respective storage period:
• “_ga” (2 years), “_gid” (24 hours): Recognition and differentiation of visitors by a user ID;
• “_ga_[GA-ID]” (2 years): Retention of the information of the current session;
• “_gac_gb_[GA-ID]” (90 days): Retention of campaign-related information and link to Google Ads Conversion Tracking, if applicable;
• “IDE” (390 days), if applicable: Recognition and differentiation of visitors by a user ID, recording of interaction with advertising, playing out of personalised advertising.
For more information on Google Analytics cookies, please visit: https://support.google.com/analytics/answer/11397207?hl=de.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) Sentence 1 (a) GDPR. Access to and storage of information in the terminal device is then carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to Section 25 (1) TTDSG. We have concluded a data processing agreement with Google Ireland Limited for the use of Google Analytics.
We have concluded an order processing agreement with Google Ireland Limited for the use of Google Analytics.
Information from the third-party provider: http://www.google.com/intl/en/analytics/learn/privacy.html; privacy policy: http://www.google.de/intl/en/policies/privacy.
7. Integration of third-party services (Google Maps)
We use Google Maps on this website. This allows us to show you interactive maps directly on the website, making it easy for you to use the map feature. The legal basis for this is Art. 6(1) Sentence 1(a) GDPR.
When you visit the website, Google receives information that you have accessed the relevant subpage of our website. The data referred to in Section 3.2 of this notice is also transferred for this purpose. This occurs regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want the data to be associated with your Google profile, you must first log out. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to serve demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles, although you must contact Google to exercise this right.
For more information about the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: http://www.google.de/intl/en/policies/privacy
8. Rights of data subjects
You have the right
a) to obtain information about the categories of data processed, the purposes of processing, any recipients of the data, and the envisaged storage period, as well as access to your data (Art. 15 GDPR);
b) to have inaccurate data rectified and incomplete data completed (Art. 16 GDPR);
c) to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR);
d) to object, on grounds relating to your particular situation, to data processing that is to be carried out on the basis of a legitimate interest (Art. 21(1) GDPR);
e) to demand the erasure of personal data in certain cases under Art. 17 GDPR – in particular insofar as the data is no longer necessary for the intended purpose or has been unlawfully processed, or you have withdrawn your consent in accordance with (c) above or objected in accordance with (d) above;
f) to demand the restriction of processing under certain conditions, insofar as erasure is not possible or the erasure obligation is disputed (Art. 18 GDPR);
g) to data portability, i.e. you can receive your data that you have provided to us in a commonly used, machine-readable format, such as a CSV file and, if necessary, transfer it to others (Art. 20 GDPR).
h) Right to complain to a supervisory authority (Art. 77 GDPR).
9. Objection or withdrawal of consent to the processing of your data
If you have given your consent to the use of data, you can withdraw this at any time with effect for the future. Such a withdrawal will not affect the lawfulness of any processing of your personal data prior to the withdrawal.
Where we base the processing of your personal data on a balance of interests, you may object to the processing. This is the case if the processing is specifically not necessary for the performance of a contract with you, which we illustrate in each case in the subsequent description of the functions. If you exercise your right of withdrawal, we kindly request that you explain the reasons why we should not process your personal data in the way we have done. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
You can, of course, object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising purposes by contacting: datenschutz@rotho.com
Also, for all other requests for information, erasure and rectification, access requests, data portability requests, objections to data processing, etc., please send an email to: datenschutz@rotho.com
If you believe that the processing of your data is in breach of data protection law or that your data protection rights have been violated in any other way, you may also contact the competent data protection supervisory authority, such as the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information (https://www.baden-wuerttemberg.datenschutz.de/).
Contact details of the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information:
Postfach 10 29 32
70025 Stuttgart
Tel.: 0711/615541-0
FAX: 0711/615541-15
E-Mail: poststelle@lfdi.bwl.de
10. Data security
We maintain modern technical and organisational measures to ensure the security of data processing, in particular to protect your personal data from risks during data transfers and to prevent third parties from gaining knowledge of your personal data. These are adapted to the current state of the art, the level of protection required for the personal data, and the risks to your rights and freedoms.
11. Changes to the data protection notice
We reserve the right to change this data protection notice to reflect changes in the law or changes in our products and services.
