Data protection information for customers and other data subjects in accordance with GDPR

With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and how it is used depends largely on the services requested or agreed. Therefore, not all parts of this information will apply to you.

Responsible for data processing is:
RB-Net Roman Bürkle GmbH & Co. KG
Management
Heilbronner Str. 2
71634 Ludwigsburg

What sources and data do we use?

We process personal data that we receive from our customers or other data subjects in the course of our business relationship. In addition, we process - to the extent necessary for the provision of our services - personal data which we obtain from publicly accessible sources (e.g. debtors' registers, land registers, commercial registers and registers of associations, press, Internet) or which are transmitted to us by other companies on a legitimate basis.
Relevant personal data are personal details (name, address and other contact details). In addition, this can also be data from the fulfilment of our contractual obligations, advertising and sales data, documentation data (e.g. log) as well as other data comparable with the aforementioned categories.

What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG)

a) for the fulfilment of contractual obligations (Art. 6 para. 1 b DSGVO).
The processing of data is carried out in the context of the performance of our contracts with our customers or for the performance of pre-contractual measures, which are carried out upon request.

b) in the context of balancing interests (Art. 6 para. 1 f DSGVO)
Where necessary, we process your data beyond the actual performance of the contract to protect legitimate interests of us or third parties. Examples:
- Testing and optimising procedures for needs analysis for the purpose of directly approaching customers,
- Assertion of legal claims and defence in legal disputes,
- Ensuring IT security and IT operations,
- prevention and investigation of criminal offences,
- Measures for building and facility security (e.g. access controls),
- measures to ensure domiciliary rights.

c) Based on your consent (Art. 6 para. 1 a DSGVO)
If you have given us consent to process personal data for certain purposes (e.g. photographs in the context of events, newsletter mailing), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018. The revocation of consent only takes effect for the future and does not affect the lawfulness of the data processed until the revocation.

d) due to legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO).
In addition, as a company we are subject to various legal obligations, i.e. legal requirements (e.g. tax laws). The purposes of processing include, among others, the fulfilment of control and reporting obligations under tax law.

Who gets my data?

Within the company, those departments that need your data to fulfil our contractual and legal obligations are given access to it. Service providers and vicarious agents employed by us may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting as well as sales and marketing.
As a matter of principle, we only pass on information about our customers if this is required by law, the customer has consented or we are authorised to issue our contracts. Under these conditions, recipients of personal data can be e.g:
- Public authorities and institutions (e.g. tax authorities, law enforcement agencies, family courts) if there is a legal or official obligation,
- creditors or insolvency administrators who make enquiries within the scope of compulsory enforcement,
- service providers that we use within the framework of order processing relationships.
Other data recipients may be those bodies for which you have given us your consent to transfer data or to which we are authorised to transfer personal data on the basis of a balancing of interests.

Data is transferred to bodies in countries outside the European Union (so-called third countries) insofar as
- it is necessary for the execution of your orders (e.g. delivery addresses),
- it is required by law (e.g. tax reporting obligations) or
- you have given us your consent.

Furthermore, a transfer to bodies in third countries is provided for in the following cases:
- If required in individual cases, your personal data may be transferred to an IT service provider in the USA or another third country to ensure IT operations.
- Personal data of people interested in our products may also be processed in the USA within the framework of a CRM system with their consent.
- With the consent of the person concerned or due to legal regulations for combating criminal acts and within the framework of a balancing of interests, personal data is transferred in individual cases in compliance with the data protection level of the European Union.

How long will my data be stored?

We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. It should be noted that our business relationship is a relationship that lasts for years.
If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - further processing is necessary for the following purposes:
- Fulfilment of retention obligations under commercial and tax law, which may result, for example, from: German Commercial Code (HGB), German Fiscal Code (AO). The periods specified there for storage or documentation are generally two to ten years.
- Preservation of evidence within the framework of the statutory limitation provisions. According to §§ 195 ff of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

What data protection rights do I have?

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with Section 19 BDSG).
You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Is there an obligation for me to provide data?

Within the scope of our business relationship, you must provide those personal data that are necessary for the establishment, implementation and termination of a business relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to enter into, perform and terminate a contract with you.

To what extent is there automated decision-making?

As a matter of principle, we do not use fully automated decision-making pursuant to Article 22 DSGVO for the establishment and execution of the business relationship. Should we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, insofar as this is required by law.

Automatic data collection of our internet presence

For technical reasons, the following data transmitted to us by your internet browser is collected: Browser type and version, operating system used, website from which you visit us (referrer URL), website you visit, date and time of your access, your Internet Protocol (IP) address.
This data is stored separately from any personal data you may have provided. They are evaluated for statistical purposes in order to be able to optimise our website and our offers. After evaluation, this data is deleted. Passwords and user IDs remain unknown to us. These data are not stored.

Manual data collection of our internet presence


Your personal data is collected in the following cases:
- Request for information material: we store, process and manage your data which are necessary to be able to offer you this service.
- Enquiries or use of the configurator or online catalogue: in order to be able to offer you this service, we store, process and manage your data which are necessary to process your enquiry.
- If you contact us by e-mail or contact form, the information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.
- If you have agreed to this, we will also use your data to inform you about news.

Use of cookies on our website

So-called cookies are used to recognise multiple use of an offer by the same user. Cookies are small text files that your Internet browser stores on your computer. When you visit our site again, these cookies provide information to automatically recognise you. This recognition is based on your IP address stored in the cookies. The information obtained in this way is used to optimise our offers and to provide you with easier access to our site.
You can prevent cookies from being stored on your hard drive by selecting "do not accept cookies" in your browser settings. However, this may result in a functional restriction of our offers.

Downloading data and software from our website

RB-Net does not guarantee the correctness of data and software which can be downloaded from the internet pages. The software is checked by RB-Net for viruses. Nevertheless, we recommend that data and software be checked for viruses after downloading using the latest virus search software. Copyrights and other special protection rights on our Internet presence The content of our Internet pages is protected by copyright. Graphics, texts, logos, pictures etc. may only be downloaded, reproduced, copied, changed, published, sent, transmitted or used in any other form with the written permission of RB-Net. Product and company names mentioned may be registered trademarks or brands. Unauthorised use may lead to claims for damages and injunctive relief.

Liability of our internet presence

RB-Net is not liable for damages, especially not for direct or indirect consequential damages, loss of data, loss of profit, system or production failures, which result from the use of these Internet pages or the downloading of data. The exclusion of liability shall not apply in the event of damage caused by the use of the Internet pages or the downloading of data due to intent or gross negligence. The legal relationship between you and RB-Net arising from the use of the Internet pages is subject to the law of the Federal Republic of Germany. In the event of legal disputes with registered traders resulting from the use of these Internet pages, the place of jurisdiction is the registered office of RB-Net Roman Bürkle GmbH & Co. KG GmbH in Ludwigsburg.
We cannot guarantee that information or personal data transmitted to us will not be "intercepted" by third parties during transmission.

Security of our internet presence

RB-Net stores your data on specially protected servers in Germany. Access to this data is only possible for a few persons authorised by RB-Net who are involved in the technical, commercial or editorial maintenance of these servers.

Use of Google Analytics on our website

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that the code "gat._anonymizeIp();" has been added to Google Analytics on this website to ensure anonymised collection of IP addresses (so-called IP masking). (Wording taken from datenschutzbeauftragter-info.de)

Use of YouTube on our website

We embed YouTube videos on some of our web pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells Youtube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your Youtube account first.
If a Youtube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the saving of cookies for the Google Ad programme, you will not have to expect any such cookies when watching Youtube videos. However, Youtube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "Youtube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/.

Advertising on our website

As a rule, the web pages do not contain any advertising space. In the contrary case, advertising is delivered via external ad servers. The data collected in connection with online advertising (AdImpressions, AdKlicks) are used exclusively for statistical evaluation and to prepare reports for advertising customers. No personal data is used in this process. Cookies may be used in the delivery of advertising without RB-Net having any influence on this.

Changes to the privacy policy

Please note that this privacy policy may be changed from time to time. We will not change your rights under this privacy policy without your express consent. It is anticipated that only minor changes will be made. Notwithstanding this, we will post any changes to the Privacy Policy on this page. If the changes are material, we will provide more detailed notice (including email notices of changes to the Privacy Policy for specific services). Each version of this Privacy Policy can be identified by its date at the top of the page. We also keep all previous versions of this Privacy Policy in an archive for your reference.

Information about your right to object in accordance with Article 21 of the GDPR Individual Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) and Article 6(1)(f) DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to object to processing of data for direct marketing purposes

In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Recipients of an objection

The objection can be made informally with the subject "Objection", stating your name, address and date of birth, and should be addressed to:

RB-Net Roman Bürkle GmbH & Co. KG
Management
Heilbronner Str. 2
71634 Ludwigsburg