As of May 2, 2026
The
controller within the meaning of the General Data Protection Regulation is:
RUWAC industrial vacuum GmbH
Westhoyeler Str. 25
49328 Melle
Germany
Represented by the management: Axel Runge, Michael Westerhold, Sebastian Jendrny, Thomas Runge
Phone: 05226 - 98300
Email: ruwac(at)ruwac.de
Data Protection Officer
Our Data Protection Officer is:
Detlef Breuker
c/o C&S Consulting
An der Blanken Mühle 17
49328 Melle
Email: info(at)datenschutz-os.de
General Information on Data Processing
We process personal data only to the extent necessary to provide a functional website, to process your inquiries, to carry out pre-contractual or contractual measures, to process job applications, to fulfill legal obligations, or based on your consent.
Processing is carried out in particular on the basis of Art. 6(1)(a) GDPR if you have given your consent, Art. 6(1)(b) GDPR if processing is necessary for pre-contractual or contractual purposes, Art. 6(1)(c) GDPR if legal obligations exist, and Art. 6(1)(f) GDPR if we have a legitimate interest in a secure, stable, and user-friendly website. To the extent that information is stored on or read from your device, this is done in accordance with the provisions of the Telecommunications and Digital Services Data Protection Act (TDDDG).
Provision of the Website and Server Log Files
When you visit our website, technical data is processed to deliver the pages and ensure the security of the system. This may include, in particular, the IP address of the accessing device, the date and time of access, the URL accessed, the amount of data transferred, the referrer URL, browser type, browser version, operating system, device information, status codes, and error messages.
This processing serves the technical delivery of the website, stability, error analysis, detection of misuse, and IT security. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable provision of our website. The specific retention period for server log files must be determined organizationally.
Cookies, Consent Management, and Similar Technologies
Our website uses cookies and similar technologies. Some of these are technically necessary, while others are only loaded with your consent. We use a consent management system that allows you to enable or decline services requiring consent. Your selection is stored in the cookie_consent_v2 cookie so that we can take your decision into account on your next visit.
Technically necessary cookies and storage serve, in particular, to deliver pages, ensure form security, manage sessions, store your cookie selection, and protect against misuse. The legal basis is Art. 6(1)(f) GDPR; where necessary, additionally § 25(2) TDDDG.
Services requiring consent, such as statistics, marketing, external media, or chat widgets, are only loaded if you have given your consent via the consent management system. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can revoke your consent at any time with future effect via the cookie settings.
Contact forms, inquiry forms, and communication
When you contact us via contact, inquiry, accessories, career, or other forms, we process the data you enter to handle your inquiry. Depending on the form, this may include, in particular, company name, first name, last name, contact person, address, ZIP code, city, country, email address, phone number, your message, inquiry details, product or accessory information, details on how you found out about us, newsletter selection, source page of the inquiry, and technical security information.
The processing is carried out to handle your inquiry and to contact you. The legal basis is Art. 6(1)(b) GDPR, insofar as your inquiry is aimed at the conclusion or performance of a contract, as well as Art. 6(1)(f) GDPR for other inquiries. Our legitimate interest lies in the efficient processing of incoming inquiries. If you voluntarily provide consent, the legal basis is Article 6(1)(a) of the GDPR.
To prevent abuse and spam, we process additional technical signals for certain forms, such as form start time, completion time, anonymized IP address, origin/referrer check, honeypot fields, interaction counters for keyboard, mouse, or touch, as well as duplicate and rate limit checks. This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting the website and our communication systems from spam, automated attacks, and misuse.
Form submissions may be forwarded via email to the relevant departments within the company and processed in internal systems. For certain inquiry forms, server-side transmission to Salesforce or Salesforce Account Engagement is used to further process your inquiry as a lead or contact request. The provider is Salesforce, Inc. or affiliated Salesforce companies. For more information, please visit salesforce.com/eu/company/privacy/ and salesforce.com/company/legal/customer-agreements/.
Job Applications
If you apply for a job via our website, we process the application data you submit. This may include, in particular, your name, phone number, email address, message, the advertised position, and uploaded documents such as your resume and other application materials.
Processing is carried out exclusively for the purpose of conducting the application process. The legal basis is Section 26 of the German Federal Data Protection Act (BDSG), Article 88 of the GDPR, and, where applicable, Article 6(1)(b) of the GDPR. If you grant us consent for longer-term storage, the legal basis is Article 6(1)(a) of the GDPR.
If you are hired, your data may be transferred to the human resources management system and further processed in accordance with legal requirements. If your application is rejected, we typically store your application data for up to six months after the conclusion of the application process, unless longer storage is required by law or you have consented to longer storage.
Newsletter
When you subscribe to our newsletter, we process your email address and, if applicable, other voluntary information such as your name, to send you information about trends, promotions, products, services, and Ruwac Insights via email.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect, for example via the unsubscribe link in our emails or by contacting us. The lawfulness of the processing carried out prior to revocation remains unaffected.
If you are already a customer, we may also use your email address for direct marketing of our own similar goods or services, subject to the legal requirements. The legal basis is Article 6(1)(f) of the GDPR in conjunction with the relevant advertising regulations. Our legitimate interest lies in marketing to existing customers. You may object to this use at any time.
Newsletter data may be processed in Salesforce or Salesforce Account Engagement. Please verify prior to the publication of this privacy policy whether a double opt-in procedure is implemented from a technical and organizational standpoint. If so, this can be added here.
Website Search, Product Finder, and Location Search
When you use search functions, product finders, filters, or location/address functions on our website, we process the search terms, filter selections, or location information you enter in order to display relevant content, products, contact persons, or locations. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing our content and services in a user-friendly manner.
Map or location displays, where available, are implemented via OpenStreetMap/Leaflet. In doing so, technical data may be processed to provide the map display and location search. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendly presentation of locations and contact persons.
Google Analytics 4
With your consent, we use Google Analytics 4, a web analytics service provided by Google. For users in the European Economic Area and Switzerland, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, which content is relevant, and how we can improve the website.
Google Analytics may use cookies and similar technologies and process information about your use of our website, such as page views, interactions, technical device information, approximate location information, and visit times. In the current implementation, Google Analytics is not loaded until you have consented to the statistics cookie option.
Google states that Google Analytics 4 does not log or store IP addresses, and IP data for EU traffic is discarded before logging. For more information, see support.google.com/analytics/answer/12017362 and support.google.com/analytics/answer/6004245.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings. For more information on data processing by Google, please visit policies.google.com/privacy.
Microsoft Clarity
With your consent, we use Microsoft Clarity, a service for analyzing the use of our website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, or Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Clarity can track how users interact with our website, such as clicks, scrolling behavior, mouse movements, technical device information, browser information, and page views. The analysis is presented in the form of heatmaps, session recordings, and usage analytics. We use this information to improve the user-friendliness of our website and identify technical or content-related weaknesses.
In the current implementation, Clarity is only loaded once you have consented to the corresponding cookie option. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. For more information, please visit learn.microsoft.com/en-us/clarity/faq and the Microsoft Privacy Statement at microsoft.com/privacy/privacystatement.
YouTube Videos
Videos from YouTube may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, USA.
Where technically feasible, we use the enhanced privacy mode via the domain youtube-nocookie.com and a consent or two-click solution. This means that YouTube content is generally only loaded once you consent to the embedding or activate the video. When loading or playing a video, data such as your IP address, browser and device information, the page accessed, the time of access, and interactions may be transmitted to Google/YouTube. If you are logged in to Google, Google may associate this usage with your account.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. For more information on enhanced privacy mode, visit support.google.com/youtube/answer/171780. Google’s privacy policy can be found at policies.google.com/privacy.
Elfsight Chatbot
With your consent, we use a chatbot or widget service from Elfsight. The widget is loaded via elfsightcdn.com and is only activated once you have agreed to the corresponding cookie option.
When the widget is loaded, technical data such as IP address, browser type, operating system, device information, and usage data may be transmitted to Elfsight. If you enter content via the chatbot, the messages and contact information you provide may also be processed. The purpose is to provide a simple contact and support option.
The legal basis for loading the widget is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. To the extent that you make contact requests via the chat, processing is additionally based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. For more information, please see Elfsight’s privacy policy at elfsight.com/privacy-policy/.
Recipients and Data Processors
Within our company, only those departments that require personal data to fulfill the stated purposes are granted access to it. In addition, we may engage service providers, such as hosting, IT, email, CRM, analytics, video, or widget providers. These service providers are engaged, where necessary, on the basis of data processing agreements or comparable data protection agreements.
Technically relevant external providers may include, in particular: hosting and email service providers, Google, Microsoft, Elfsight, Salesforce, and, where applicable, other services listed in the cookie banner.
Transfers to Third Countries
When using external services, personal data may be transferred to countries outside the European Union or the European Economic Area, in particular to the United States. Such transfers are made, where necessary, on the basis of an adequacy decision, in particular the EU-U.S. Data Privacy Framework, or appropriate safeguards such as EU Standard Contractual Clauses. Despite such safeguards, it cannot be ruled out that authorities in third countries may access data.
Retention Period
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Contact and inquiry data will be deleted or blocked as soon as the inquiry has been fully processed and no statutory retention obligations prevent this. Communications relevant under contract or commercial law may be retained in accordance with statutory retention periods.
Application data is regularly deleted no later than six months after the conclusion of the application process, provided that no hiring takes place, there are no legal grounds for longer storage, and you have not consented to longer storage. Newsletter data is stored for as long as the subscription remains active or legal documentation requirements necessitate longer storage.
Specific retention periods for server log files, form security logs, consent statistics, and CRM data should be determined internally and added here.
Your Rights
You have the following rights under the GDPR: Right of access under Art. 15 GDPR, Right to rectification under Art. 16 GDPR, Right to erasure under Art. 17 GDPR, Right to restriction of processing under Art. 18 GDPR, Right to data portability under Art. 20 GDPR, right to object under Art. 21 GDPR, and the right to withdraw consent with future effect.
To exercise your rights, you may contact us using the contact details provided above or the contact address listed in the legal notice.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. You may exercise this right, in particular, with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. We ask that you first contact us or our Data Protection Officer with any questions or complaints so that we can address your concerns directly.
Security Measures
We implement technical and organizational security measures to protect personal data from loss, destruction, manipulation, and unauthorized access. Our security measures are continuously improved in line with technological developments. Please note that data transmission over the Internet may be subject to security vulnerabilities despite all security measures.
Updates to this Privacy Policy
Due to the ongoing development of our website, new features, or changes in legal requirements, it may be necessary to amend this Privacy Policy. The current version published on this website applies.
Information Requirements Under the GDPR
Additional information requirements under the GDPR, as well as information regarding the application process pursuant to Article 13 of the GDPR, can be downloaded from our website, if provided.