Privacy statement and duties to provide information according to GDPR

Data protection in accordance with the GDPR

Data protection and the protection of your personal data is one of our top priorities. The following section provides information about the processing of your personal data on our Internet site. Your personal data is processed in accordance with the provisions of the Telemedia Act (TMG) and the General Data Protection Regulation (GDPR), in addition to the new Federal Data Protection Act (BDSG new version).

1. Name and address of the controller

Ruwac Industriesauger GmbH, Westhoyeler Str. 25, 49328 Melle represented by the Managing Directors: Axel Runge, Thomas Runge
Tel.: 05226 - 98300, e-mail: ruwac(at)ruwac.de

2. Contact information for the Data Protection Officer

Detlef Breuker, c/o C&S Consulting, Ochsenweg 62 b, 49324 Melle
e-mail: info(at)datenschutz-os.de

3. Processing of personal data on our website

3.1.    Provision of the website and creation of log files
It is not necessary for you to disclose any personal data in order to simply visit our website and access the information it contains.
While you visit our Internet site, we only collect and use data that is automatically transmitted to us by your Internet browser:

  • Date and time at which you accessed one of our web pages
  • Your browser type
  • Your browser settings
  • Your IP address
  • The pages you have visited

We use this data to technically enable you to visit our site. We additionally use this data for statistical purposes and to improve the design and layout of our website. We also store your IP address to guarantee and maintain functionality and IT security (e.g. to identify and ward off DOS attacks).
The legal basis for temporary storage of the data is provided by Art. 6 para. 1 sub-para. f GDPR.

3.2. Personal data on forms
Personal data is only recorded if you provide it voluntarily as part of a contact inquiry or an application.

3.3. Contact form, application
There are multiple contact forms on our website which can be used to get in touch with us electronically.
If you use these forms, the data entered in the input screen will be transmitted to our company, where it is saved. This data varies depending on the type of form in question:

  • Company
  • Last name
  • First name
  • Street, house number
  • Postcode, town
  • E-mail address
  • Telephone
  • Fax

You may be asked to consent to processing of your data during the submission process, with a reference to this data protection declaration.
Data transmitted to us via the form is encrypted before it is sent to us.
Alternatively, you can contact us using the e-mail address provided. In this case the user's personal data transmitted with the e-mail will be stored.

3.4. Purpose and legal basis for data processing
Personal data which you enter into the input screen is processed solely for the purpose of processing your contact inquiry. If you request that we contact you by e-mail, this is also the basis for our required legitimate interest in processing the data.
The legal basis for processing data transmitted by e-mail is provided by Art. 6 para. 1 sub-para.  f GDPR. If the purpose of the e-mail contact is to conclude a contract, a further legal basis for processing is provided by Art. 6 para. 1 sub-para. b GDPR.
The legal basis in the context of an application for employment derives from section 26 BDSG new version and Art. 88 GDPR. The purpose of collecting your personal data is to deal with your application for employment. Therefore, we will only use your applicant data for the purpose of processing your application.

3.5. Duration of storage or criteria for determining the duration
Contact form: Where the purpose for storage of the data no longer applies, personal data will be blocked or erased unless subject to legal obligations of data retention.
Application for employment: We will store your personal data when we receive your application.  If you are hired, we will store your applicant data in accordance with the statutory retention periods, after any employment relationship with you has ended.  If we reject your application, we will store your applicant data for six months after your application is rejected, unless you grant your consent for us to store it longer.

3.6. Recipients or categories of recipients (if data transmission takes place)

The departments within the company which need your data to deal with your enquiry will be supplied with this information. In the context of your application for employment, your data will be transmitted to the specialist department responsible.

3.7. Reference to the rights of data subjects
All data subjects are entitled to the following data protection rights in accordance with the GDPR:

  • Right to access acc. to Art. 15 GDPR
  • Right to the rectification of incorrect data acc. to Art. 16 GDPR
  • Right to erasure acc. to Art. 17 GDPR
  • Right to restriction of processing acc. to Art. 18 GDPR
  • Right to data portability acc. to Art. 20 GDPR
  • Right to object acc. to Art. 21 GDPR

To exercise your above rights, and to revoke consent after you have granted it, please contact the e-mail address indicated in the Legal Notice.

You have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
Before contacting the competent supervisory authority with a complaint, please be so kind as to clarify the matter with our data protection officer.

3.8. Planned data transmission to third countries
No transfer of data to third countries takes place at present, nor is any planned in future.

4. Use of cookies

We use cookies on our website. These are small text files transmitted by our web server to your computer in order to identify you for the duration of your visit. We do not use these cookies to collect personal data.

It would not be possible to display our website without storing cookies. You can deactivate the storage of cookies via your browser settings, or you can change your settings so that you are informed when a website intends to save a cookie. In this case, you will decide whether or not to accept the cookie. However, for technical reasons you must permit all temporary cookies in order to ensure all functions of our website are available.

5. Use of Google Analytics

This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). This service is used to collect and store data, which is then used to create pseudonymized usage profiles. These usage profiles help to analyse user behaviour, and are analysed in order to improve our website and design it in accordance with users’ needs.

Google Analytics uses cookies, text files which are stored on your computer and which make it possible for us to analyse your use of the website. The information generated by the cookie on your use of the website (including parts of your IP address) is transmitted to the USA by a Google server and saved there. Google will use this information to analyse your use of the website, in order to assemble reports on website activities for the website operator and to provide other services associated with use of the website and use of the internet. Google may also transmit this information to third parties, if this is required by law or if these third parties process this data under contract by Google. In no case will Google combine your IP address with other data in its possession. Likewise, we will not combine the pseudonymised usage profiles with personal data of the bearer of the pseudonym without your express consent. This consent must be granted separately. Data is collected for usage statistics and transmitted to Google using the code extension “gat._anonymizeIp();”. Therefore, IP addresses are collected in anonymised form (called IP masking).

6. Security measures

We employ technical and organisational security measures in order to protect personal data, in particular from accidental or wilful manipulation, loss, destruction or access by unauthorised persons. Our security measures are subject to continuous improvement in line with technological advances. We should like to remind you that, despite all security measures, when data is transferred via the Internet it may be accessed or falsified by third parties.

7. Contact

Should you have any queries or suggestions regarding this privacy statement, please get in touch with the contact address stated in the Legal Notice.

8. Updates to our data protection guidelines

Constant technical advances in terms of IT technology and the Internet also make it necessary to amend our existing privacy statement. We thus reserve the right to supplement or amend the present privacy statement.

Duties to provide information according to the GDPR

Processing of personal data within the company

We process personal data which we receive from you in the framework of requests for information, enquiries, business development, contract processing, online orders or our business relationship. We process other personal data, if necessary to fulfil the contract, which we have received from other companies or from other third parties in a permitted manner (for instance to carry out orders, to fulfil contracts or based on consent granted by you). Relevant personal data includes details such as your name, address and other contact information. It may also involve order data, data from compliance with our contractual obligations, advertising and sales data, documentation data and other data comparable with the categories given.

1. Purpose and legal basis of processing

The purposes of processing primarily depend on the service you have either requested or enquired about.

1.1.    Processing is necessary for the performance of a contract or implementation of pre-contractual measures (Art. 6 para. 1 sub-para. b GDPR).
Personal data is processes for the purpose of performing and arranging trading activities, in particular for carrying out our contracts or for the purpose of pre-contractual measures with you and to complete your orders. Furthermore, the data is processed in order to respond to inquiries or orders when using our webshop.

1.2.    Processing is subject to the evaluation and balancing of interests (Art. 6 para. 1 sub-para. f GDPR). Processing of your data by ourselves will go beyond actual execution of the contract where necessary to safeguard legitimate interests of either ourselves or third parties

  • Exchange of data with credit agencies (SCHUFA, Creditreform) to establish default
  • and creditwothiness risks
  • Advertising or market and opinion research where you have not objected to usage of your data
  • Handling of enquiries and requests for information
  • Assertion of legal claims and defence with litigious disputes
  • Guarantee of IT security
  • Prevention and investigation of criminal offences
  • Measures for business management and further development of services and products.

1.3.    You have provided your consent to process your personal data for one or more specific purposes (Art. 6 para. 1 letter A GDPR).

  • Where you have given us consent to process personal data for specific purposes (e.g. advertising, mailing of newsletters, publication of photographs and/or personal data), the lawfulness of such processing is based here on your consent.
  • Where consent is given, it can be revoked at any time. This also applies to the revocation of declarations of consent which were made vis-à-vis ourselves before GDPR came into force, i.e. prior to 25 May 2018.
  • Revocation shall apply only with future effect. Processing operations which were performed prior to revocation are not affected here.

1.4.    Processing is necessary in order to fulfil a legal obligation to which we are subject (Art. 6 para. 1 letter C GDPR).

  • As a company we are subject to various legal obligations in the framework of our control and reporting duties according to fiscal and social security legislation. Further requirements may ensue from the German Act on the Severely Disabled, on the part of the institutions for statutory accident insurance and prevention, the prevention of fraud and money laundering, compliance with the provisions of the EU anti-terror regulation, etc.

2. Recipients or categories of recipients (if data transmission takes place)

2.1.    Within the company the departments which need your data to comply with our contractual and legal obligations are supplied with this information. Processors (Art. 28 DS-GVO) deployed by ourselves may receive data for such specified purposes. This includes companies in the categories of credit management, IT and printing services, telecommunications and consulting, as well as sales and marketing.

2.2.    Outside the company your data may be given to companies which require it to ensure compliance with our contractual obligations. In these circumstances, the recipients of personal data may include, e.g.:

  • Accountants, auditors, consultants
  • Lawyers (disputes, debt collection, etc.)
  • Technicians/skilled tradespersons (maintenance, repair)
  • Transport and logistics companies
  • Debt collectors
  • Banks/savings banks
  • Credit agencies (SCHUFA, Creditreform)

3. Storage period or criteria for determining this period

Where necessary, we process and store your personal data for the duration of our business relationship, which may, include, preparing for and handling a contract. We are furthermore subject to various obligations of retention and documentation, which above all ensue from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods of retention and documentation specified in these provisions are between six and ten years.

Ultimately, the storage period is also determined according to the statutory limitation periods, which are generally 3 years, e.g. pursuant to Section 195 et seq. of the German Civil Code (BGB). However, if it is necessary to preserve evidence, for instance in the framework of legal proceedings, the limitation periods of BGB may be up to 30 years if there is a court decision to this effect.

After the contractual relationship ends, the data is erased on expiry of the legal obligations of retention.

Where the purpose for storage of the data no longer applies, personal data will be blocked or erased unless subject to legal obligations of data retention.

4. Information on the rights of data subjects

Under GDPR every data subject holds the following rights to data protection:

  • Right to access acc. to Art. 15 GDPR
  • Right to the rectification of incorrect data acc. to Art. 16 GDPR
  • Right to erasure acc. to Art. 17 GDPR
  • Right to restriction of processing acc. to Art. 18 GDPR
  • Right to data portability acc. to Art. 20 GDPR
  • Right to object acc. to Art. 21 GDPR

To exercise your above rights, and to revoke consent after you have granted it, please contact the above controller.

You have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
Before contacting the competent supervisory authority with a complaint, please be so kind as to clarify the matter with our data protection officer.

5. Planned data transmission to third countries

No transfer of data to third countries takes place at present, nor is any planned in future.

6. Voluntary and obligatory provision of personal data

In the framework of our business relationship it is necessary to provide personal data which is required in order to embark on and to maintain a business relationship and to comply with the associated contractual obligations or which we are obliged to collect according to the statutory provisions. Without this data we are not able to conclude or perform a contract.

7. Automated decision-making, including profiling

In no cases do we employ automated decision-making as defined in Art. 22 GDPR to establish and maintain business relationships.

Informational obligations in accordance with the GDPR – download here