Privacy Statement

Version 05/2018

We, the rff Rohr Flansch Fitting Handels GmbH would like to welcome you on our website and express our delight about your interest in our company and products. We take the protection of your data very seriously and hope that you feel comfortable during your visit on our website. Our main concern, which we observe thoroughly in our business processes, is your privacy. This Privacy Statement solely affects the processing of personal data, which we collect in the context of providing our website. We process personal data collected during the visit of our website according to the applicable data protection law of the General Data Protection Regulation [Directive (EU) 2016/679; page 1f. of Directive EU 4th May 2016 L 119, hereinafter referred to as “GDPR”] and in accordance with the applicable national data protection regulations pertaining to rff Rohr Flansch Fitting Handels GmbH. Our website may contain links to websites of other providers which are not subject to this Privacy Statement. In principle, this Privacy Statement is not directed towards minors.

Definitions

This Privacy Statement is based on the definitions in Art. 4 GDPR. We would like to inform you about the here used definitions in advance, in order to promote transparency and comprehensibility:

„Personal Data“

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

„Data Subject“

A data subject is any identified or identifiable natural person, whose personal data is processed by the controller.

„Processing“

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

„Restriction of Processing“

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

„Controller“

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

„Processor“

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

„Third Party“

Third party means a natural or legal person, public authority, agency or body other than the data subject, Controller, processor and persons who, under the direct authority of the Controller or processor, are authorized to process personal data.

„Consent“

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

„Profiling“

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

„Pseudonymisation“

Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller and Data Protection Officer

Please address the Controller responsible for your personal data pursuant to Art. 4 para. 7 GDPR or our Data Protection Officer in case of enquiries regarding the processing of your personal data, for further information, adaption or alteration, restriction, blocking, erasure or destruction as well as for withdrawals of given declarations of consent:

rff Rohr Flansch Fitting Handels GmbH
Carl-Zeiss-Straße 21
28816 Stuhr / Bremen, Germany

Phone  +49 (0) 421 8771 0
Fax  +49 (0) 421 8771 3000
Email  rff@rff.de

Contact Details of the Controller's Data Protection Officer

Mr. Jens Fuhrken
rff Rohr Flansch Fitting Handels GmbH
Carl-Zeiss-Straße 21
28816 Stuhr / Bremen, Germany

Phone  +49 (0) 421 8771 2700
Email  datenschutz@rff.de

Processing of Personal Data

By visiting our website our webservers will store your IP address by default for purposes of avoidance of attacks or security analysis.

Additional personal data will only be collected if agreed to or if you give it to us of your own accord e.g. in the course of filling in a contact form, an online form for job application, a contact request, by registering for “My rff”, for the newsletter, for the suppliers’ portal or for the execution of a contract or an order.

The personal data you provide will be used for purposes of contacting and/or for the execution of the orders.

Your personal data will only be stored on our servers within the Federal Republic of Germany.

Your personal data will be erased from the servers if and when they are no longer necessary for the initial purposes. Personal data subject to legal storage times are excluded thereof.

Contact

You may contact us by email, telephone, fax and/or by using a contact form. The personal data given here will be used for processing your contact approach.

Job Application Tool

rff Rohr Flansch Fitting Handels GmbH processes personal data of applicants for the purpose of conducting the application procedure. The processing may be executed by electronic means. This is especially the case if an applicant transmits application documents by electronic means to the Controller, e.g. by email or by using the online form provided on this website. In the event an employment contract is concluded with an applicant, the transmitted personal data will be stored for the purpose of conducting the employment relationship with respect to legal regulations. If no employment contract is concluded, the application documents will be deleted 3 months after the disclosure of the refusal if and when no other legitimate interest of the Controller bars the erasure. In this sense, legitimate interest is e.g. a burden of proof in proceedings according to the German General Act on Equal Treatment (AGG).

Registration to My rff

You can register on our website and create a customer account. The personal data given by you for this matter will only be used and stored for the application of our services. Furthermore, we also store the date of your registration. Personal data will not be disclosed to third parties.

Newsletter

On our website, you may subscribe to our free newsletter. The newsletter informs periodically about our offers. The subscriber’s data from the form will be transmitted to us. This concerns company names, postal codes and seat of the company, a phone number, your first and your family name, a valid email address and your function within the company. After subscribing, you will receive a confirmation email in order to maintain the double-opt-in process. By following the link included, you confirm your subscription and that you are the owner of the registered email address. Furthermore, the date and time of the subscription will be stored. Thereby, we make sure that your email address will not be misused by third parties. As part of the subscription process, your consent to the processing of the data will be obtained and reference is made to this Privacy Statement. Your data collected in the subscription process will only be used for sending the newsletter. Data will not be disclosed to third parties. You may withdraw the consent to the subscription to the newsletter at any time. For the purpose of the withdrawal of the consent, a link can be found in each newsletter. Furthermore, you can directly unsubscribe the newsletter at any time by contacting the Controller or the Controller’s Data Protection Officer. Details hereto may be obtained in the confirmation email as well as in each newsletter.

Suppliers‘ Portal

rff Rohr Flansch Fitting Handels GmbH offers the registration for a suppliers‘ portal. This is an IT application made available by rff Rohr Flansch Fitting Handels GmbH which provides chosen suppliers with a quick access to various types of information. Furthermore, current orders may be accessed and administered by using the suppliers’ portal. The personal data collected hereby will only be used for contacting and for the execution of the orders and will not be disclosed to third parties.

Online Catalogue Service

rff Rohr Flansch Fitting Handels GmbH provides the opportunity to register for the Online Catalogue Service. Therewith, the established catalogues of rff Rohr Flansch Fitting Handels GmbH will be made available electronically for you to access from anywhere.

To use the online catalogues, you must register as a user by filling in the application form for this service. The personal data given within the framework of this application will be used exclusively for enabling the use of the catalogue service and will not be disclosed to third parties. Your account will only be activated when you receive an email with your username and password.

Automated Individual Decision-Making

Should we use automated individual decision making –included profiling – according to Art. 22 para. 1 and 4 GDPR, you will be informed about the logic as well as the consequences and about the intended effects of such processing on the data subject.

Legal Basis for the Processing of Personal Data

The processing of your personal data is based on the regulations of the GDPR.

If we obtain your consent to the processing of personal data, Art. 6 para. 1 lit. a) GDPR serves as legal basis for the processing.

Processing personal data which is required for the performance of a contract to which you are a party, Art. 6 para. 1 lit. b) GDPR serves as legal basis. This also applies for processing which are required for the execution of precontractual measures, especially during the initiation of a contract and the job application process.

If and when the processing of personal data is required for the compliance of a legal obligation which our company is subject to, Art. 6 para. 1 lit. c) GDPR serves as legal basis.

If the processing is required for the purposes of a legitimate interest of our company or a third party and if your interests, civil rights and basic freedoms are not overridden by the first mentioned interest, Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing.

Disclosure of your Personal Data

Personal Data will not be disclosed for advertising purposes to third parties.

Your personal data shall only be forwarded to third parties to execute our services. This concerns companies which are involved in the execution of your orders such as payment service providers, warehouses, packers and parcel services.

The disclosure to third parties is either based on your consent or on one of the abovementioned legal bases or on a data processing agreement.

Personal data shall only be transmitted to government institutions and authorities as part of obligatory national legal provisions.

Our employees are obliged to confidentiality.

Right of Confirmation

You have the right to claim confirmation from the Controller whether your personal data is being processed. If and when you wish to make use of this right of confirmation, you may contact the Controller or the Controller’s Data Protection Officer at any time.

Right of Access

Upon request, we notify you in writing as promptly as possible and according to applicable law if and which of your personal data is stored by us. Should incorrect information have been stored despite our efforts to data integrity and timeliness, we will correct it upon your request.

If you have any questions regarding the processing of your personal data, you may contact the Controller or the Controller’s Data Protection Officer.

Right to Obtain a Copy

You have the right to request a free copy of all processed personal data concerning your person. Further copies may be reasonably charged. The right to obtain a copy shall not impair the liberties of other persons. Commercial secrets and intellectual property rights of third persons may bar the right to obtain a copy. Please direct your enquiry to the Controller or the Controller’s Data Protection Officer.

Right of Withdrawal, Rectification and Erasure

You have the right to withdraw your consent to the use, processing and disclosure of your personal data at any time with future effect resp. to demand the correction of incorrect personal data or the erasure of your personal data but for any legal obligation to preserve records. Please direct your enquiry to the Controller or the Controller’s Data Protection Officer.

Right to Restriction of Processing

Provided that the prevailing statutory provisions are met, you have the right to request the restriction of the processing of your personal data. Please direct your enquiry to the Controller or the Controller’s Data Protection Officer.

Right to Data Portability

You have the right to receive the personal data concerning yourself which you disclosed to the Controller in a structured, commonly used and machine-readable format. Exercising the right to data portability, you furthermore have the right to obtain the direct transmittance of the personal data from one Controller to another if this is possible technically and if the rights and freedoms of other persons are not affected hereby. To exercise your right, please direct your enquiry to the Controller or the Controller’s Data Protection Officer.

Right to Object

Due to reasons which emerge from your specific situation, you have the right to object to processing of your personal data affected due to Art. 6 para. 1 lit. e) or f) GDPR at any time. This also applies to profiling based on these regulations.

In the case of objection, rff Rohr Flansch Fitting Handels GmbH does no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

If rff Rohr Flansch Fitting Handels GmbH processes personal data for the purpose of direct advertisement, you have the right to object to the processing of your personal data for such advertising purposes at any time. In case of objection, rff Rohr Flansch Fitting Handels GmbH will no longer process your personal data for these purposes.

In order to exercise your right to object, please address the Controller or the Controller’s Data Protection Officer.

Right to Lodge a Complaint with a Supervisory Authority

You shall have the right to lodge a complaint with a supervisory authority, if you consider that the processing of your personal data violates applicable statutory provisions.

Security

We implement technical and organizational security measures to protect your personal data processed by us against manipulation, loss, destruction and the access by unauthorized persons. Our security measures are continuously enhanced according to technological development. Internet- based data transmissions may in principle show security gaps, though we can not guarantee absolute protection. Therefore, you are free to transmit your personal data by alternative means, e.g. telephonically.

Cookies

In order to make our websites user-friendly, we do use cookies. Cookies are small text files which your internet browser files and stores on your computer. This enables easing navigation and ensures a high level of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our internet offer. So, we are able to tailor the content of our website more specifically to your needs and therefore, improve our offers for you. Cookies can be used to determine whether there already existed a communication between your computer and our website. Personal data can be stored in cookies if consented to, e.g. to facilitate a secure online access, so that entering a User ID and password is no longer necessary.

You may certainly use our website without cookies. Most browsers accept cookies automatically. You may prevent the filing of cookies on your computer by choosing the “no cookies” setting in your browser menu. Detailed information may be gathered from the instructions of your browser provider. Cookies already set on your computer can be deleted at any time. Switching off cookies may restrict your use of the website and/or delay or affect the way in which it operates.

Use of Google Analytics with Anonymization Function

We use Google Analytics on our website. This is a web analytics service provided by Google Inc. (hereinafter referred to as “Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

This service stores cookies on your personal computer (cf. “cookies” above). The information generated by the cookie about your use of our website IP address, time, place, duration, frequency will be stored. This information will also be transmitted to Google. However, we use an anonymizing function („_gat._anonymizeIp"). Within the EU, this guarantees anonymized data collection by masking the last part of your IP address.

Google evaluates the transmitted information, forwards us the evaluation and offers related services. If required by law or if third parties process this data on Google’s behalf, this information may be transmitted to third parties.

You may refuse or limit the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Furthermore, you can prevent Google’s collection and use of the data generated by the cookie about your use of our website by downloading and installing the deactivation browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en .

Use of DoubleClick with Google

We use DoubleClick by Google (hereinafter referred to as “DoubleClick”) on our website. DoubleClick by Google is a service operated and provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. DoubleClick uses cookies to enable Google to serve customized ads to you. A pseudonomized identification number (ID) will be assigned to your browser to check, which ads were inserted and retrieved on your browser. These cookies do not contain personal data. Google’s use of the DoubleClick cookie enables it and its partners to serve ads based on previous visits to our sites and/or other sites on the internet. The information generated by the cookie will be transmitted to and stored by Google on servers in the United States. Google may also transmit this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf based on a data processing agreement.

By using this website you consent to the processing of your data by Google in the manner and for the purpose set out above. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note, that if you do so, you may not be able to use the full functionality of our websites. Furthermore, you can prevent Google’s collection and use of the data generated by the cookie about your use of our website by downloading and installing the DoubleClick deactivating browser plug-in https://www.google.com/settings/ads/plugin. Alternatively, you may deactivate the DoubleClick cookies by following this link on the website of the Digital Advertising Alliance.

Use of Google Maps

We make use of maps and charts of Google Maps on our website to illustrate a site map. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing as well as with the use of the automatically gathered data as well as of the data you entered by Google, one of its agents or by third party suppliers. The terms of use for Google Maps can be found here: https://www.google.com/intl/de_US/help/terms_maps.html . Full details can be found in Google’s Data Protection Regulations: https://policies.google.com/privacy?hl=en .

rff – Strongly connected.