As of May 2, 2026
The
data controller within the meaning of the General Data Protection Regulation is:
RUWAC Industriesauger GmbH
Westhoyeler Str. 25
49328 Melle
Germany
Represented by the management: Axel Runge, Michael Westerhold, Sebastian Jendrny, Thomas Runge
Phone: 05226 - 98300
Email: ruwac(at)ruwac.de
Data Protection Officer
Our Data Protection Officer is:
Detlef Breuker
c/o C&S Consulting
An der Blanken Mühle 17
49328 Melle
Email: info(at)datenschutz-os.de
General Information on Data Processing
We process personal data only to the extent necessary to provide a fully functional website, to handle your inquiries, to carry out pre-contractual or contractual measures, to process job applications, to fulfill legal obligations, or based on your consent.
Processing is based in particular on Article 6(1)(a) of the GDPR if you have given your consent, Article 6(1)(b) of the GDPR, if processing is necessary for pre-contractual or contractual purposes; Article 6(1)(c) of the GDPR, if legal obligations apply; and Article 6(1)(f) of the GDPR, if the processing is necessary to protect our legitimate interests or the interests of third parties and no overriding interests or fundamental rights and freedoms of the data subject prevent this.
To the extent that information is stored on or retrieved from your device, we also comply with the provisions of the Telecommunications and Digital Services Data Protection Act (TDDDG).
Provision of the Website and Server Log Files
When you visit our website, technically necessary data is processed to ensure that the website is delivered and to guarantee the stability and security of our systems.
This may include, in particular, the following data:
- IP address of the accessing device
- Date and time of access
- URL accessed
- Amount of data transferred
- Referrer URL
- Browser type and version
- Operating system
- Device information
- HTTP status codes and error messages
This processing is necessary for the technical operation of the website, to ensure stability and security, to analyze errors, and to detect and prevent misuse and attacks.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and reliable provision of our website.
Server log files are stored only for as long as necessary for the purposes stated above. Storage beyond this period occurs only to the extent necessary to investigate specific security incidents or where statutory retention obligations apply.
Cookies, Consent Management, and Similar Technologies
Our website uses cookies and similar technologies. Some of these are technically necessary, while others are used only with your consent.
We use a consent management system that allows you to enable or disable services requiring your consent. Your selection is saved so that your decision can be taken into account during future visits.
To the extent that technically necessary cookies or comparable storage technologies are used, the storage of information on your device or access to such information is based on Section 25(2) of the German Telemedia Act (TDDDG), provided that the legal requirements are met. The associated processing of personal data is based in particular on Article 6(1)(f) of the GDPR. Our legitimate interest lies specifically in the technical provision of the website, form security, session management, the storage of your privacy and cookie preferences, and protection against misuse.
Services requiring consent—in particular statistics, analytics, marketing, external media, or chat services—are used only if you have given your prior consent. In these cases, the storage of or access to information on your device is based on Section 25(1) of the German Telecommunications Data Protection Act (TDDDG). The subsequent processing of personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may revoke any consent you have given at any time with future effect via the cookie settings.
Contact Forms, Inquiry Forms, and Communication
If you contact us via contact, inquiry, accessories, career, or other forms, we process the data you enter to handle your inquiry.
Depending on the form, this may include, in particular, the following information:
- Company
- First and last name
- Contact person
- Address, ZIP code, city, and country
- Email address
- Phone number
- Message and details of your inquiry
- Product or accessory details
- Information on how you found out about us
- Newsletter selection
- Source page of the inquiry
- Technical safety information
Data is processed to handle your inquiry and to contact you.
The legal basis is Article 6(1)(b) of the GDPR, provided your inquiry relates to the conclusion or performance of a contract or to pre-contractual measures. For other inquiries, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the efficient processing of incoming inquiries and communication with prospective clients and business partners.
To the extent that you voluntarily provide consent, the relevant processing is based on Article 6(1)(a) of the GDPR.
To prevent abuse and spam, additional technical information and signals may be processed for certain forms. This may include, in particular, the time the form was initiated and the time taken to complete it, technical connection information, origin and referrer checks, honeypot fields, interaction signals, as well as duplicate and rate-limit checks.
This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our website and communication systems from spam, automated attacks, and misuse.
Form submissions may be forwarded via email to the appropriate departments within our company and processed in internal systems.
For certain inquiry forms, data may be transmitted on the server side to Salesforce or Salesforce Account Engagement and processed there in order to further process your inquiry as a lead, contact, or sales inquiry.
The providers are Salesforce, Inc. or companies affiliated with Salesforce. For more information on data protection at Salesforce, please visit:
https://www.salesforce.com/company/privacy/
Job Applications
If you apply for a position with us via our website, we will process the application data you submit.
This may include, in particular:
- First and last name
- Phone number
- Email address
- Your message
- The advertised or desired position
- Resume
- Certificates
- Any additional application documents you have submitted
The processing is carried out for the purpose of deciding whether to establish an employment relationship and for the purpose of conducting the application process.
The legal basis is Section 26(1) of the Federal Data Protection Act (BDSG).
To the extent that you voluntarily consent to further processing or longer retention of your application documents, for example, to be considered for future job openings, the processing is based on Article 6(1)(a) of the GDPR in conjunction with Section 26(2) of the BDSG.
If you are hired, your application data may be transferred to our human resources system and further processed within the framework of the employment relationship in accordance with legal requirements.
If you are not hired, we generally store your application data for up to six months after the application process is completed. Longer storage will only occur if there are legal grounds for doing so or if you have consented to longer storage.
Newsletter
If you subscribe to our newsletter, we process your email address and, if applicable, other voluntary information—in particular your name—to send you information about trends, promotions, products, services, and company news via email.
The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect, for example, by using the unsubscribe link in our emails or by contacting us. The lawfulness of the processing carried out prior to revocation remains unaffected.
If we have received your email address in connection with the sale of a product or service, we may use it for direct marketing of our own similar products or services under the conditions set forth in Section 7(3) of the German Unfair Competition Act (UWG).
In this case, the processing under data protection law is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in promoting our own similar offers to existing customers.
You may object to the use of your email address for advertising purposes at any time without incurring any costs other than the transmission costs according to the standard rates.
Newsletter and contact data may be processed in Salesforce or Salesforce Account Engagement as part of newsletter and customer communications.
Website Search, Product Finder, and Location Search
When you use search functions, the product finder, filters, or location and address functions on our website, we process the search terms, filter selections, or location information you enter in order to display relevant content, products, contact persons, or locations to you.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing our content and services in a user-friendly manner that meets your needs.
For map or location displays, we use OpenStreetMap map data and the JavaScript library Leaflet, where applicable on the respective page.
When providing map or location features, technically necessary connection data may be processed. This may include, in particular, the IP address.
This processing is used to display locations and contact persons, as well as to provide search and map functions. The legal basis, unless consent is required, is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the user-friendly display of locations and contact persons.
Google Analytics 4
With your consent, we use Google Analytics 4, a web analytics service provided by Google.
The provider for users in the European Economic Area is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, USA.
Google Analytics is used to evaluate and better understand the use of our website. This allows us, for example, to identify which content is being used and how our website can be improved.
In the course of use, information may be processed, in particular, regarding page views, interactions, technical device and browser information, approximate location information, as well as the times and duration of visits. Google Analytics may use cookies or similar technologies for this purpose.
Google Analytics is only activated on our website if you have consented to the corresponding statistics or analytics category in the consent management system.
The storage of information on your device or access to it is based on Section 25(1) of the TDDDG. The processing of personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You can revoke your consent at any time with future effect via the cookie settings.
For more information on data processing by Google, please visit:
https://policies.google.com/privacy
For information about Google Analytics, please visit:
https://support.google.com/analytics/
Microsoft Clarity
With your consent, we use Microsoft Clarity, a service for analyzing the use of our website.
The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Depending on the processing, affiliated Microsoft companies, in particular Microsoft Corporation in the U.S., may also be involved.
Microsoft Clarity may collect information about how users interact with our website. This may include, in particular, clicks, scrolling behavior, mouse movements, page views, and technical device and browser information.
The analysis may take the form of heat maps, session recordings, and usage analytics, among other things. We use this information to improve the user-friendliness of our website and to identify technical and content-related weaknesses.
Microsoft Clarity is activated on our website only after you have given your consent.
The storage of information on your device or access to it is based on Section 25(1) of the TDDDG. The processing of personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect via the cookie settings.
For more information, please visit:
https://learn.microsoft.com/clarity/
as well as in Microsoft’s Privacy Statement:
https://privacy.microsoft.com/privacystatement
YouTube Videos
Videos from YouTube may be embedded on our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, USA.
YouTube content is generally not loaded until you have consented to the embedding of external media or activated the respective content.
If YouTube’s enhanced privacy mode is used, the embedding takes place via the domain youtube-nocookie.com.
When loading or playing a YouTube video, information such as your IP address, browser and device information, the page you visited, the time of access, and details about your interaction with the video may be transmitted to Google or YouTube.
If you are logged into a Google account at the same time, Google may, if applicable, associate your use of the video with your user account.
The storage of information on your device or access to it is based on Section 25(1) of the TDDDG. The processing of personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You can revoke your consent at any time with future effect via the cookie settings.
For more information, please see Google’s Privacy Policy:
https://policies.google.com/privacy
Elfsight Chatbot
With your consent, we use a chatbot or widget service provided by Elfsight.
The widget can be loaded via servers and content delivery networks provided by Elfsight and is only activated on our website once you have consented to the corresponding category in the consent management section.
When the widget loads, technical data—including, in particular, your IP address, browser type, operating system, device information, and usage data—may be transmitted to Elfsight.
If you enter content via the chatbot, the messages you enter and, if applicable, your contact information may also be processed.
The purpose of this processing is to provide a simple way to contact us and receive support.
The storage of information on your device or access to it occurs when the widget is loaded, based on Section 25(1) of the TDDDG. The associated processing of personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR.
If you submit a specific contact or contract inquiry via the chatbot, the further processing of your information will be based on Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR, depending on the content of the inquiry.
For more information, please see Elfsight’s Privacy Policy:
https://elfsight.com/privacy-policy/
Recipients and Processors
Within our company, only those departments that require personal data to fulfill the respective processing purposes are granted access to it.
In addition, personal data may be transferred to external service providers and other recipients to the extent that this is necessary for the stated purposes and permitted under data protection law.
These may include, in particular:
- Hosting and IT service providers
- Email service providers
- CRM and marketing service providers
- Analytics and statistics services
- Video and media providers
- Map and location services
- Chat and widget providers
To the extent that a service provider processes personal data on our behalf, the collaboration is based on a data processing agreement in accordance with Article 28 of the GDPR.
External providers used in connection with our website may include, in particular, Google, Microsoft, Salesforce, and Elfsight, as well as other service providers identified in our consent management system or in this Privacy Policy.
Transfers to Third Countries
When using external service providers, personal data may be transferred to or processed in countries outside the European Union or the European Economic Area.
This applies in particular to providers or their affiliated companies based in the United States.
A transfer to a third country will only take place if the legal requirements for such a transfer are met.
If an adequacy decision by the European Commission pursuant to Article 45 of the GDPR exists for the third country in question, the transfer may take place on that basis. For transfers to appropriately certified companies in the United States, the EU-U.S. Data Privacy Framework may serve as the basis in particular.
If no adequacy decision applies, appropriate safeguards pursuant to Article 46 of the GDPR, in particular the Standard Contractual Clauses adopted by the European Commission, may be used.
Retention Period
We store personal data only for as long as is necessary for the respective processing purposes or as long as statutory retention obligations or other legal grounds require further storage.
If the respective purpose of processing no longer applies and there is no legal or other basis for further storage, the data will be deleted or, if deletion is temporarily not possible, blocked for other purposes.
Contact and inquiry data are generally deleted as soon as the respective inquiry has been fully processed and there are no statutory retention obligations or other legitimate reasons for further storage.
Communications relevant to contract law, commercial law, or tax law may be stored in accordance with statutory retention periods.
Application data is typically deleted no later than six months after the conclusion of the application process if the application is unsuccessful, provided there are no legal grounds for longer retention and you have not consented to longer retention.
Newsletter data is generally stored for as long as the respective subscription remains active. Following a revocation or unsubscription, certain information may continue to be stored to the extent necessary to fulfill statutory record-keeping or documentation obligations or to comply with an objection to advertising.
For technical security and log data, the retention period depends on the specific purpose and the necessity of storage. In particular, data may be stored for as long as necessary to ensure IT security, analyze errors, prevent misuse, or investigate specific security incidents.
Your Rights
Subject to the statutory requirements, you have the following rights in particular:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 of the GDPR
- Right to erasure pursuant to Art. 17 of the GDPR
- Right to restriction of processing pursuant to Article 18 of the GDPR
- Right to data portability pursuant to Article 20 of the GDPR
- Right to object pursuant to Art. 21 of the GDPR
- Right to withdraw consent with future effect
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to such withdrawal.
To exercise your rights, you may contact us using the contact information provided above or the contact address listed in the legal notice.
Right to Object
To the extent that we process personal data on the basis of Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to such processing at any time for reasons arising from your particular situation.
If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing.
Right to File a Complaint with a Supervisory Authority
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
In particular, you may exercise this right with a supervisory authority in the Member State of your habitual residence, your place of work, or the location of the alleged infringement.
Regardless of this, you may contact us directly at any time with questions or complaints, or, if available, our Data Protection Officer.
Security Measures
We implement appropriate technical and organizational measures to protect personal data against loss, destruction, manipulation, unauthorized access, and other unauthorized processing.
The security measures in place are regularly reviewed and adjusted, taking into account the state of the art, the risks associated with the processing, and technical and organizational developments.
Please note that, despite appropriate security measures, data transmission over the Internet cannot be completely protected against all risks.
Updates to This Privacy Policy
Due to the ongoing development of our website, the introduction of new features and services, or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
The current version published on our website applies.
Additional Disclosure Requirements
To the extent that additional or separate privacy notices are required for specific processing operations—particularly in connection with the job application process—these will be made available to the data subjects in an appropriate location.