PRIVACY STATEMENT of

RIFCON GmbH

Goldbeckstraße 13
D-69493 Hirschberg
Deutschland

Tel.: +49 (0)6201-845428-00
Email: info@rifcon.de
Website: www.rifcon.de

We thank you for your interest in our company and the services we provide, and it is our wish that you should feel sure about the protection of your personal data whenever you visit our website. The protection of your personal data is a highly important issue for us, and for this reason it goes without saying that we comply with the provisions of the EU General Data Protection Regulation (EU GDPR) and the other relevant data protection laws. We should like you to know what data we collect, when we collect them and what use we make of them. We have taken technical and organisational precautions to ensure that the data protection provisions are observed both by ourselves and by external service providers.

What anonymous data do we collect – and why?

On the following pages we will show what data we collect within the framework of this website and for what different purposes we use them:

When you visit our website, our web servers automatically store the data transmitted by your browser to enable you to visit these pages and inform yourself about our services and our company. The following data are stored:

• the name of your internet service provider,
• your IP address (anonymised),
• the website from which you are visiting us, together with the location, date and time of your visit,
• the contents which have been downloaded
• the amount of data transferred in each case,
• the page load speed
• your browser, the language and version of your browser software, together with your operating system and its interface.

Our system allows these technical data to be evaluated anonymously and solely for statistical purposes to enable us to optimise our website and provide a more attractive presentation. These anonymous data will be stored on secured systems separately from personal information and allow no conclusions to be drawn about any individual person.

On the following pages we will show you what data we collect within the scope of this website and the various purposes for which we use them.

Processing of data using cookies

Cookies are text files which are stored on your device for the purpose of following up your preferences and to enable us to tailor our content as closely as possible to your interests.

Our website uses Matomo, an open-source software for statistical evaluation of accesses by visitors. Matomo uses cookies which are stored on your computer and which enable an anonymised analysis of your use of the web presence. No conclusions can be drawn about any individual person since your IP address is anonymised immediately after processing and before storage. Further information about Matomo can be found at https://matomo.org/privacy-policy/.

When entering our website, users are informed about the use of cookies for the purpose of analysis and asked to confirm whether they agree to the processing of the personal data used in this connection. Attention is drawn to this Privacy Statement. The information generated by the cookie about your use is stored only on the servers of RIFCON GmbH. The data collected in this way are used solely for purposes of the company’s own internal statistics and are erased once they have been evaluated.

We use transient cookies, which are automatically erased when you close your browser. These transient cookies include more especially session cookies. They store a so-called Session ID, which allows different requests from your browser to be assigned to the particular session, thus enabling your computer to be recognised when you return to the website. Session cookies are erased when you log out or close your browser.

To prevent cookies being stored, set your browser to refuse cookies. However, if cookies are not accepted by the browser, the number of functions available on the website may be limited.

These items of information are stored separately from any other data supplied to us. In particular, cookie data are not linked with any of your other data.

The legal basis for processing of the data are Article 6(1) lit. a and Article 6(1) lit. f of the EU GDPR.

Hosting

Our website is hosted by our processor 1&1 IONOS, 1&1 IONOS SE, Elgendorfer Str. 57,
D-56410 Montabaur, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) lit. f EU GDPR.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

Security services

On this website we use the offer of security service providers such as Captcha services to avoid non-human and automated input.

If you give your consent, we will process your personal data in cooperation with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of avoidance of non-human and automatised inputs. We will enable the service to set third party cookies, to collect connection data and data of your web browser. Furthermore we enable the service to build a personal user-ID to conclusively identify the user within the scope of the advertising network operated by Google. The data will be stored on your device for up to two years.

The legal basis of processing is your consent according to Article 6 (1) lit. a EU GDPR. A failure to give consent will have the effect of not being able to use reCaptcha or the connected forms.

Google Fonts

We process connection data and browser data in cooperation with our processor Google Fonts, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in order to provide the fonts which the web browser needs to display the website. These data are processed only for the time needed to select and transfer the fonts.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) lit. f EU GDPR.

Any further independent processing of data by Google Fonts is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy and in the FAQ of Google Fonts.

Data processing using our general contact form

If you contact us via our website, we will process the following items of information to help us prepare a suitable response to your enquiry:

•  your first name and surname
•  your email address
•  the text of your enquiry
• your IP address

Without these data, we will be unable to deal with your enquiry.

The following additional data can be supplied voluntarily:

• your telephone number
• title
• topic/subject
• the name of your company

If these data are not supplied, we will be unable to contact you by any of these possible routes, but only via your email address. The data will be erased as soon as they cease to be needed for dealing with your enquiry.

Alternatively, you can contact us directly via our email address (info@rifcon.de). In this case, the user’s personal data transmitted together with the email will be stored.

The legal basis for processing your data are Article 6(1) lit. a and Article 6(1) lit. f of the EU GDPR in cases where your enquiry is processed in order to provide information about our company and the services it offers.

If your enquiry is concerned with preparations for entering into a contract, the legal basis is Article 6(1) lit. b of the EU GDPR.

Handling of applications

We process your application documents on the basis of Article 6(1) lit. a of the EU GDPR and Article 26 of the Federal Data Protection Act. Your applications will be passed on internally within the company and erased after conclusion of the application process after 6 months. They will not be passed on outside the company.

What applies generally for all cases of data processing?

No data will be passed on to third parties.

Should a statutory retention obligation exist, we must point out that we will be unable to erase your data before the end of the retention period. The same applies mutatis mutandis to any retention obligation arising out of a contract with you.

How do we safeguard your data?

We have taken technical and organisational security measures in order to protect your data processed by us against accidental or deliberate manipulation, loss, destruction, or against access by unauthorised persons. Our security measures are subjected to continuous improvements to keep them in line with technical developments.

Our employees and any third parties entrusted with data processing have been obliged by us to maintain confidentiality.

To ensure the security of processing data and to protect the transmission of confidential content (e.g. when you use our contact form for your enquiries), our website uses SSL encryption. You can see whether a connection is encrypted if “https://” appears instead of “http://” in the browser address bar and the closed lock symbol is shown there.

When SSL/TLS encryption is activated, the data you have sent us cannot be read by third parties.

The right to information and the right to object

According to the EU GDPR, you have the right at any time to demand information from us as to whether data relating to your person are stored by us. With regard to these stored data you also have the following rights:

• the right to information on stored personal data (Article 15 EU GDPR),
• the right to rectification of inaccurate personal data (Article 16 EU GDPR),
• the right to erasure of personal data (Article 17 EU GDPR),
• the right to restriction of processing (Article 18 EU- GDPR),
• the right to object to unacceptable processing of personal data (Article 21 EU GDPR) and
• the right to data portability (Article 20 EU GDPR).

If you have given your consent to the use of data, you can withdraw this at any time for all future use.

In the case of information requests, enquiries concerning personal data or objections to the processing of your data, please send them by email to info@rifcon.de or to the postal address given on our website (www.rifcon.de/en/legal-note).

You also have the right to lodge complaints with a supervisory authority – particularly in the Member State either of your habitual residence or your place of work or the place of the alleged infringement – if you consider that the processing of personal data relating to you infringes the EU GDPR (Article 77 of the EU GDPR). For our company the Competent Supervisory Authority would be in Stuttgart (see below).

Competent Supervisory Authority

Baden-Württemberg

Supervisory Authority

The State Representative for Data Protection Baden-Württemberg

Address:

• Postfach 10 29 32, 70025 Stuttgart
• Urbanstr. 32, 70182 Stuttgart

Telefon: 0711 615541 – 0
Fax: 0711 615541-15
Email: poststelle@lfd.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de

Children and young people

Persons below the age of 18 may not submit personal data to us without the consent of their parents or legal guardians. We do not request any personal data from children and young people, nor do we collect them or pass them on to third parties.

Further Information

Contact details of our Data Protection Officer: ds-beauftragter@streit-online.de

Information within the meaning of Article 13(2) lit. e EU GDPR. The provision of personal data is not required by law or contract, and is not necessary for entering into a contract. You are not obliged to supply personal data. However, failure to do so may involve certain disadvantages for particular data processing operations (see “What personal data do we collect – and why?”).

Amendment of our Privacy Statement

We reserve the right to amend our data protection measures if this becomes necessary due to technical developments or changes in legislation or jurisdiction. In such cases we will revise our Privacy Statement accordingly. For this reason we would ask you to consult the most up-to-date version of our Privacy Statement.