1. Data protection at a glance
The following notes provide a general overview of what is done with your personal data when you visit our website. Personal data involves all the information with which you can be identified as an individual. Detailed information on the subject of data protection is provided below in our Privacy Statement.
Data collection on our website
Who is responsible for data collection on our website?
Data on our website is collected by the website operator. For the website operatorʻs contact data, see the masthead of this website.
How do we collect your data?
Some of the collected data is provided by you with the entries you make. For example, this can be the data you enter in contact or registration forms.
Other data are collected automatically by our IT system as soon as you visit our website. This mainly involves technical data (e.g. internet browser, operating system, or the time when a page was viewed). These data are collected automatically as soon as you visit our website.
What do we do with your data?
Some of the data are collected to ensure an optimum presentation of our website content. Other data can be used to analyse the userʻs behaviour.
Which rights do you have, regarding your data?
At any time, you are entitled to request free information about your stored personal data, its source, recipients, and the purpose of processing it. You also have the right to demand that your personal data is corrected, blocked, or deleted. For this, and for any other questions regarding data protection, you can contact us by means of the address provided in the legal notice.
Furthermore, you have a right of appeal to the competent supervisory authority.
Analysis tools and third-party tools
When you visit our website, your surfing behavior can be evaluated statistically. This is done mainly with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous – your surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For details, see the "General notes and mandatory information" below.
You may object to this analysis. For details, see the possibilities of objection under "Analytical tools and advertising" below.
2. General notes and mandatory information
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
When you visit this website, various personal data are collected.
Personal data involves all the information with which you can be identified as an individual. This privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission via the Internet (e.g. when communicating by email) can involve security risks. It is not possible to completely protect the data from access by third parties.
Note regarding the responsible body
The responsible party for data processing on our website is:
Refratechnik Holding GmbH
Phone: +49 89 96107 200
holding at refra.com
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
This privacy statement informs users about the nature, scope, and purpose of the collection and use of personal data on this website operated by Refratechnik Holding GmbH, Georg-Muche-Str. 4, 80807 München, Germany, Phone +49 89 96107 200, Fax +49 89 96107 222, holding at refra.com (referred to as “Supplier” hereinafter).
The legal basis for data protection is given in the Bundesdatenschutzgesetz (BDSG = Federal Data Protection Act) and the Telemediengesetz (TMG = German Telemedia Act).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke your consent at any time. For this, an informal email to us is sufficient. This does not affect the data processed legally before we receive your revocation.
Right to data portability
You are entiled to have the data processed by us based on your consent, or processed automatically in fulfilment of a contract, delivered to yourself or to a third party in a standard, machine-readable format. If you wish to have the data transferred directly to another responsible party, this will only be done as far as technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, e.g. orders or inquiries you send to us as the website operator.
A secure encrypted connection is indicated in your browserʻs address line when it changes from "http://" to "https://" and the lock icon is displayed.
If the secure SSL or TLS encrypted connection is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
Within the limits of applicable law, at any time, and free of charge, you have the right to be informed about your personal data saved by us, its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted.
For this, and for any other questions regarding personal data, you can contact us by means of the address provided in the legal notice.
Objection to promotional emails
Hereby, we prohibit the use of contact data published in this websiteʻs legal notice for sending promotional and informational material not expressly requested by us. The website operator explicitly reserves the right to take legal action if unsolicited promotional material, such as email spam, is received.
3. Data protection officer
Statutory data protection officer
We have appointed a statutory data protection officer for our website.
Verified data protection auditor acc. to Ulm model (TÜV-certified)
ref.datenschutz at capcad.de
CAPCAD SYSTEMS AG – Data protection hotline
Headquarters München/Ismaning: Phone +49 89 991522-17
4. Data collection on our website
Cookies are small text files containing specific information about your access device (e.g. PC, laptop, smartphone) and are stored on the device by your browser. The information stored in the cookies helps us make our services safer and more user-friendly (e.g. to store your login data). In addition, the data are evaluated statistically so that we can continuously improve and optimize our website. Users can decide whether and how cookies are stored. Most browsers provide an option that limits or completely prevents cookies being stored. However, by limiting or refusing to accept cookies, this can result in functional restrictions of the offers on our website.
The US website http://www.aboutads.info/choices/ and the European website http://www.youronlinechoices.com/uk/your-ad-choices/ permit many online advertising cookies to be configured.
Access data / server logfiles
The Supplier (or his web space provider) collects data about every access to our website (so-called server logfiles). This access data includes:
Name of the visited website, file, date, and time of the visit, amount of data transferred, indication of a successful visit, browser type and version, the userʻs operating system, referrer URL (the previously accessed website), IP address, and the requesting provider.
This access data is used by the Supplier only for statistical evaluation and for the purpose of operating, protecting, and optimizing of the website contents. However, the Supplier retains the right to check such access data subsequently, if there are specific indications to suspect illegal use.
Use of personal data
Personal data covers all information that enables a person to be identified, i.e. information that can be traced back to an individual person. Such data also includes a name, an email address or a telephone number. But also information about preferences, hobbies, memberships, or which websites have been visited is considered as personal data.
The Supplier will only collect, make use of, and pass personal data to third parties insofar as this is legally permitted or the user has given his/her consent.
When contacting the Supplier (e.g. via contact form or eMail), the userʻs contact data will be stored for the purpose of processing the inquiry and in case of further questions.
Comments and contributions
If visitors enter comments in our blog or make other contributions, their IP addresses will be stored. This is done for the Supplierʻs safety, in case someone posts comments or contributions with illegal contents (insults, forbidden political propaganda, etc.). In such cases, the Supplier can be held liable for the comment or contribution, and is therefore interested in the posterʻs identity.
Data entered during registration are used for the purpose of navigating the website. Moreover, users can be informed via eMail about changes to the offered services/products, information that is relevant for registration, or technical circumstances. The collected data can be viewed in the registration form.
This website uses a proprietary CMS statistics plugin. For this purpose, a session cookie is stored on the userʻs PC (only temporarily until the end of the browser session). Hereby, all collected data are saved completely on our providerʻs web server. The accessed data includes: Name of the visited website, language version, downloads, date and time of the visit, browser type including version, the userʻs operating system, system information such as display resolution and colours, country of origin, referrer URL (the previously visited page), IP address (anonymized), and the requesting provider. However, the recorded data are only used for statistical evaluation for the purpose of operation, safety, and optimization of the contents.
Deviations can result due to possible registration and login to our password-protected area. Here, page calls and downloads are assigned to the userʻs account, as these data represent a justified interest for proof of special requests for content (e.g. when registering for an event or similar).
In case of unusual page calls (e.g. non-existent pages or parameters), additional logfile information (incl. non-anonymized IP address) is saved for safety reasons (e.g. to investigate malicious attacks, misuse, or fraudulent activities) for the maximum duration of one month, after which the data are deleted. Data that must be stored as evidence for a longer period, i.e. until final clarification of the incident, are excluded from deletion after one month.
User data is stored in accordance with Art. 6, Sect. 1, Subsect. f) of the GDPR. For the purpose of increasing and optimizing the contents, the website operator has a legitimate interest in the anonymized analysis of user activities, and this represents no risk for the rights and freedoms of the data subject.
5. Analysis tools and advertising
This website makes use of Google Analytics, a web analysis service offered by Google Inc. (“Google”). Google Analytics places cookies (small text files) on your computer, enabling us to analyse your use of our website. The information collected by the cookies about your use of the website (including your IP address) is usually transferred to a Google server in the USA, where it is stored. At the request of the website operators, Google will use this information to analyse how you use the website, to compile reports concerning website activity, and to provide other services associated with website and Internet usage. Google will not associate your IP address with any other data held by Google. You can prevent cookies being installed by selecting the relevant setting in your browser. However, please note that if you choose to disable cookies, you may not be able to access all the functions provided by the website. Alternatively, you can prevent the cookies from transferring the collected data about your use of the website (including your IP address) to Google as well as any further processing of such data by Google, by using the following link to download and install the corresponding browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=en .
We have activated the IP masking (anonymization) feature on this website. This means that within the European Union or in other countries that are party to the Agreement on the European Economic Area, your IP address will be shortened by Google before transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. At the request of the website operators, Google will use this information to analyse how you use the website, to compile reports concerning website activity, and to provide other services associated with website and Internet usage. Within the scope of Google Analytics, the IP address transmitted by your browser will not be merged with any other data held by Google.
You can prevent cookies being installed by selecting the relevant setting in your browser. However, please note that if you choose to disable cookies, you may not be able to access all the functions provided by the website. Alternatively, you can prevent the cookies from transferring the collected data about your use of the website (including your IP address) to Google as well as any further processing of such data by Google, by using the following link to download and install the corresponding browser plug-in:
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data being collected during future visits to this website: Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data with Google Analytics
This website uses the "Demographics and Interests" function of Google Analytics. The function allows the preparation of reports providing information on age, gender, and interests of visitors to our website.
These data originate from personalized advertising by Google as well as activity data from third-party websites. The data cannot be attributed to a particular person. At any time, you can deactivate this function in the display settings of your Google account or generally object to the collection of your data using Google Analytics as described under “Objecting to the collection of data”.
Our newsletter informs you about our company and our offers.
If you wish to receive our newsletter, we require a valid e-mail address as well as information that enables us check that you are the owner of the specified email address or that its owner consents to receiving our newsletter. No further data will be collected. These data are used exclusively for mailing the newsletter, and will not be passed on to third parties.
When registering for our newsletter, we will store your IP address and the date of registration. The sole purpose of this is identification in case a third party misuses an email address to register for our newsletter without the knowledge of the rightful address owner.
You can withdraw your consent to the storage of your data, the email address, and the use of this data for mailing the newsletter at any time. Withdrawal can be implemented via a link in the newsletters, in your profile area, or by a message via the contact possibilities indicated above.
7. Inclusion of third-party services and contents
It is possible that this website includes contents from third parties, such as videos from YouTube, material from Google maps, RSS feeds or images from other websites. This always assumes that the suppliers of such contents (called “third supplier” hereinafter) will know the userʻs IP address, because without the IP address, they would be unable to transfer the contents to the respective userʻs browser. Consequently, the IP address is required for the representation of such contents. We attempt to use such content only from third suppliers who only use the IP address to transfer their content. However, we have no means of knowing whether a third supplier stores the IP address, e.g. for statistical purposes. Insofar as we know this, we will inform the users accordingly.
Our website uses plugins from YouTube, which is operated by Google. The pages are operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our website pages featuring a YouTube plugin, a connection to the YouTube servers is established. Hereby, the YouTube server is informed about which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help us improve the offers on our website and make them more attractive. This constitutes a justified interest acc. to Art. 6 (1) (f) of the General Data Protection Regulation (GDPR).
Further information about handling user data is provided in YouTubeʻs privacy statement under https://policies.google.com/privacy?hl=en
Via an API, this website uses the Google Maps service. The service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the Google Maps functions, your IP address must be stored. This information will usually be transferred to and stored on a Google server in the USA. The provider of this website has no influence on this data transmission.
We use Google Maps to make our website more attractive, and to assist in locating the places indicated by us on the website. This constitutes a justified interest acc. to Art. 6 (1) (f) of the General Data Protection Regulation (GDPR).
8. Right of objection, changes, corrections, and updates
The data subject (user) has the right to obtain from the controller confirmation as to whether personal data concerning him are being processed; if that is the case, he has a right of access to the personal data and the information detailed in Article 15 of the GDPR.
The data subject (user) has the right to demand that the controller corrects incorrect personal data concerning him without delay, and possibly to complete incomplete personal data (Article 16 of the GDPR).
The data subject (user) has the right to demand that the controller deletes personal data concerning him without delay, provided that one of the reasons detailed in Article 17 of the GDPR applies, e.g. if the personal data are no longer necessary for the intended purpose (right of erasure).
The data subject (user) has the right to demand that the controller restricts processing for a duration that enables the controller to make the necessary checks, provided that one of the reasons detailed in Article 18 of the GDPR applies, e.g. if an objection against processing has been lodged.
For reasons arising from his particular situation, the data subject (user) has the right to object against processing of personal data concerning him at any time. The controller will then no longer process the personal data, unless the controller can prove that there are compelling legitimate grounds for processing that outweigh the userʻs interests, rights, and freedoms or if processing serves to establish, exercise or defend legal claims (Article 21 of the GDPR).
Without prejudice to any other administrative or judicial remedy, the user has the right to lodge a complaint with a supervisory authority, he considers that the processing of his personal data infringes the regulations of the GDPR (Article 77 of the GDPR). The data subject (user) has the right to lodge his complaint with a supervisory authority in the member state of his habitual residence, place of work, or place of the alleged infringement. In Bavaria, the competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
9. Privacy protection of persons under 16 years of age in the Internet
Refratechnik Holding GmbH does not knowingly collect information from minors (under 16 years) or use it in any way. As a rule, we are not aware of the age of visitors to our website. However, we have not taken any specific steps to protect such data in a particular manner.
Without the express permission of parents or a custodian, persons under the age of 16 years may not submit any personal data.