Information on data protection
We also inform you in detail about
ROWASOL GmbH, Siemensstraße 1-3, 25421 Pinneberg (hereinafter referred to as “we” or “us”) is responsible for data processing.
I. General information
1. contact
If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please send your request to
ROWASOL GmbH
Siemensstraße 1-5
25421 Pinneberg
Phone: +49-4101 706-04
E-mail: info(at)rowasol.de
2. legal bases
The data protection term “personal data” refers to all information relating to an identified or identifiable individual.
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. We only process personal data with your consent (Art. 6 (1) (a) GDPR), for the performance of a contract to which you are a party or at your request for the implementation of pre-contractual measures (Art. 6 (1) (b) GDPR), for compliance with a legal obligation (Art. 6 (1) (c) GDPR) or if the processing is necessary for the performance of a contract to which you are a party (Art. 6 (1) (f) GDPR). (c) GDPR) or if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 (1) (f) GDPR).
3. duration of storage
Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such statutory retention obligations may arise in particular from commercial or tax law regulations.
4. recipients of the data
We use contracted service providers for individual processing operations. This includes, for example, hosting, maintenance and support of IT systems, marketing measures or file and data carrier destruction. These service providers only process the data in accordance with explicit instructions and are contractually obliged to guarantee suitable technical and organizational measures for data protection. In addition, we may transfer personal data of our customers to bodies such as postal and delivery services, payment and information services, house banks, tax consultants/auditors or the tax authorities.
5. processing in the exercise of your rights pursuant to Art. 15 to 22 GDPR
If you exercise your rights in accordance with Art. 12 to 22 GDPR, we will process the personal data transmitted for the purpose of implementing these rights by us and to be able to provide proof of this. We will only process data stored for the purpose of providing and preparing information for this purpose and for the purposes of data protection monitoring and will otherwise restrict processing in accordance with Art. 18 GDPR.
These processing operations are based on the legal basis of Art. 6 para. 1 lit. c) GDPR in conjunction with. Art. 15 to 22 GDPR and Section 34 (2) BDSG.
6. your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether or not we process personal data relating to you and, if so, to what extent.
- You have the right to demand that we rectify your data in accordance with Art. 16 GDPR.
- You have the right to demand that we erase your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
- You have the right to restrict the processing of your personal data in accordance with Art. 18 GDPR.
- In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
- If you have given us separate consent to process your data, you can withdraw this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the legality of the processing that was carried out on the basis of the consent until the revocation.
- If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
7. right to object
In accordance with Art. 21 (1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.
8. data protection officer
You can reach our data protection officer at the following contact details:
datenschutz(at)rowa-group.com
II Data processing on our website
When you use the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected by us during your visit to the website. Under data protection law, the IP address is also considered personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
1. processing of server log files
When using our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 letter f) GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted after 14 days unless there is a justified suspicion of unlawful use based on concrete evidence and further examination and processing of the information is necessary for this reason. We are not in a position to identify you as a data subject on the basis of the stored information. Art. 15 to 22 GDPR therefore do not apply in accordance with Art. 11 para. 2 GDPR, unless you provide additional information that enables your identification in order to exercise your rights set out in these articles.
2. contact options and inquiries
Our website contains a contact form which you can use to send us messages. The transfer of your data is encrypted (recognizable by the “https” in the address line of the browser). All data fields marked as mandatory are required to process your request. If you do not provide this data, we will not be able to process your request. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact e-mail. We process the data for the purpose of answering your request. If your request is aimed at the conclusion or execution of a contract with us, Art. 6 para. 1 letter b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 (1) (f) GDPR.
3. cookies
We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server. If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves our legitimate interest in making our website more user-friendly, effective and secure. We use so-called “session cookies”, which are deleted when the browser session ends. You can delete the cookies in your browser’s security settings at any time. You can object to the use of cookies through your browser settings in principle or for certain cases. Further information on this is available from the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html.
III. further data processing
1. contractual relationship
In order to establish or implement the contractual relationship with our customers, it is regularly necessary to process the contact details of the relevant contact persons provided to us. The processing serves our legitimate interest in a smooth business process. The legal basis for this processing is Art. 6 (1) (f) GDPR. We also process customer and prospective customer data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 para. 1 letter f) GDPR and serves our interest in further developing our offer and informing you specifically about offers from ROWA GROUP Holding GmbH. Further data processing may take place if you have given your consent (Art. 6 (1) (a) GDPR) or if this serves to fulfill a legal obligation (Art. 6 (1) (c) GDPR).
2. applications
If you apply to our company, we will process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and acknowledged by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have submitted for up to six months after any rejection for the purpose of answering questions in connection with your application and rejection. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage. The legal basis for data processing is § 26 para. 1 sentence 1 BDSG. If we store your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Art. 7 para. 3 GDPR. Such a revocation does not affect the legality of the processing that took place until the revocation on the basis of the consent.
3. offline orders
If you order a product via our order form or by telephone, we process personal data exclusively for contract processing or to be able to provide you with the ordered product. As part of the ordering process, we only process the data that you have provided yourself. In order to be able to deliver the ordered products to you, we transmit your data required for delivery to one of our shipping service providers as specified in the order. The legal basis for the processing is Art. 6 para. 1 letter b) GDPR. All data fields marked as mandatory are required to process your order. Failure to provide this data means that we will not be able to process your order. The provision of further data is voluntary.
4. LinkedIn company page
In principle, LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is solely responsible for the processing of personal data when you visit our LinkedIn page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
When you visit our LinkedIn company page, follow this page or engage with the page, LinkedIn processes personal data to provide us with statistics and insights in anonymized form. This gives us insights into the types of actions that people take on our site (so-called page insights). In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. With the Page Insights, LinkedIn does not provide us with any personal data about you. We only have access to the summarized Page Insights. It is also not possible for us to draw conclusions about individual members from the information in the Page Insights. This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and improving our company page based on these findings. The legal basis for this processing is Article 6(1)(f) GDPR. We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum. The following then applies:
- LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn via the following link(https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) online or contact LinkedIn using the contact details in the Privacy Policy. You can contact the Data Protection Officer at LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You can also contact us using the contact details provided to exercise your rights in connection with the processing of personal data in the context of Page Insights. In such a case, we will forward your request to LinkedIn.
- LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see under www.dataprotection.ie) or to any other supervisory authority.
Please note that in accordance with the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the USA or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision in accordance with Art. 45 GDPR or on the basis of suitable guarantees in accordance with Art. 46 GDPR.