Data protection: Your rights – our commitment
You can rely on us for the protection and safety o your personal data: For Refratechnik Holding GmbH, protection of your privacy and your rights when processing personal data is an important issue that we observe in all our business transactions.
Therefore, we inform you here about the basic rules governing the way we handle personal data.
How we use your data
When you visit our website, Refratechnik Holding GmbH collects, processes, and uses the data provided by you exclusively in accordance with the privacy regulations for the protection of personal data.
We only use these personal data for the purposes listed in this privacy statement (e.g. to process inquiries or possibly to deal with insurance agreements). When collecting personal data by means of forms, you will be informed about the purpose of data collection and other circumstances in accordance with Article 13 GDPR. Any use of such data for other purposes is excluded.
Note regarding the responsible body
The responsible party for data processing on our website is:
Refratechnik Holding GmbH
Georg-Muche-Str. 4
80807 München
Germany
Phone: +49 89 96107 200
holding at refra.com
Data protection officer
For further information you are welcome to contact our Data Protection Officer at any time:
Verified data protection auditor acc. to Ulm model (TÜV-certified)
Thorsten Ewald
ref.datenschutz at capcad.de
CAPCAD SYSTEMS AG – Data protection hotline
Headquarters München/Ismaning: Phone +49 89 991522-17
Privacy protection of persons under 16 years of age in the Internet
Refratechnik Holding GmbH does not knowingly collect information from minors (under 16 years) or use it in any way. As a rule, we are not aware of the age of visitors to our website. However, we have not taken any specific steps to protect such data in a particular manner.
Without the express permission of parents or a custodian, persons under the age of 16 years may not submit any personal data.
Information that we collect
You can use practically the entire contents of this website without having to provide personal data. Only a few of the offers and services on our website pages require that you provide us with personal data for their use.
Availability of the website
As soon as you visit our website, the website operator (service provider) automatically collects, stores, and evaluates certain technical data (browser type, browser version, operating system, referrer URL, host name, time of access, IP address). However, these data cannot be assigned to a specific person – the individual user remains anonymous. These data will not be combined with data from other sources. According to Article 6 (1) (f) of the GDPR, this constitutes a justified interest for the purpose of technically correct representation and optimization of the website. Data is only stored for as long as required for the specified purpose.
Contact form and e-mail contact
There is a contact form on our website that you can use for your question to us. In order to answer your questions, we need your e-mail address as well as the text describing your request.
Any other data is provided voluntarily. Alternatively, it is possible to contact us via our own e-mail address. The data provided by you will be processed by us to answer your question. Legal basis for data processing is Article 6 (1) (a) of the GDPR. The purpose of data processing is to answer your question. All stored data will be deleted as soon as the purpose for processing has been fulfilled, and no further legal or contractual reasons for further storage exist Usually, the data provided by you will be stored for 9 months, provided that no additional reason for processing (e.g. order, offer) results from your question.
Analysis tools and advertising
BLUEPAGE statistics
This website uses a proprietary CMS statistics plugin. For this purpose, a session cookie is stored on the userʻs PC (only temporarily until the end of the browser session). Hereby, all collected data are saved completely on our providerʻs web server. The accessed data includes: Name of the visited website, language version, downloads, date and time of the visit, browser type including version, the userʻs operating system, system information such as display resolution and colours, country of origin, referrer URL (the previously visited page), IP address (anonymized), and the requesting provider. However, the recorded data are only used for statistical evaluation for the purpose of operation, safety, and optimization of the contents.
Deviations can result due to possible registration and login to our password-protected area. Here, page calls and downloads are assigned to the userʻs account, as these data represent a justified interest for proof of special requests for content (e.g. when registering for an event or similar).
In case of unusual page calls (e.g. non-existent pages or parameters), additional logfile information (incl. non-anonymized IP address) is saved for safety reasons (e.g. to investigate malicious attacks, misuse, or fraudulent activities) for the maximum duration of one month, after which the data are deleted. Data that must be stored as evidence for a longer period, i.e. until final clarification of the incident, are excluded from deletion after one month.
User data is stored in accordance with Art. 6, Sect. 1, Subsect. f) of the GDPR. For the purpose of increasing and optimizing the contents, the website operator has a legitimate interest in the anonymized analysis of user activities, and this represents no risk for the rights and freedoms of the data subject.
Google Analytics
This website makes use of Google Analytics, a web analysis service offered by Google Inc. (“Google”). Google Analytics places cookies (small text files) on your computer, enabling us to analyse your use of our website. The information collected by the cookies about your use of the website (including your IP address) is usually transferred to a Google server in the USA, where it is stored. At the request of the website operators, Google will use this information to analyse how you use the website, to compile reports concerning website activity, and to provide other services associated with website and Internet usage. Google will not associate your IP address with any other data held by Google. You can prevent cookies being installed by selecting the relevant setting in your browser. However, please note that if you choose to disable cookies, you may not be able to access all the functions provided by the website. Alternatively, you can prevent the cookies from transferring the collected data about your use of the website (including your IP address) to Google as well as any further processing of such data by Google, by using the following link to download and install the corresponding browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=en .
IP masking
We have activated the IP masking (anonymization) feature on this website. This means that within the European Union or in other countries that are party to the Agreement on the European Economic Area, your IP address will be shortened by Google before transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. At the request of the website operators, Google will use this information to analyse how you use the website, to compile reports concerning website activity, and to provide other services associated with website and Internet usage. Within the scope of Google Analytics, the IP address transmitted by your browser will not be merged with any other data held by Google.
Browser plug-in
You can prevent cookies being installed by selecting the relevant setting in your browser. However, please note that if you choose to disable cookies, you may not be able to access all the functions provided by the website. Alternatively, you can prevent the cookies from transferring the collected data about your use of the website (including your IP address) to Google as well as any further processing of such data by Google, by using the following link to download and install the corresponding browser plug-in:
https://tools.google.com/dlpage/gaoptout?hl=en .
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data being collected during future visits to this website: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Googleʻs privacy policy: https://support.google.com/analytics/answer/6004245?hl=en
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data with Google Analytics
This website uses the "Demographics and Interests" function of Google Analytics. The function allows the preparation of reports providing information on age, gender, and interests of visitors to our website.
These data originate from personalized advertising by Google as well as activity data from third-party websites. The data cannot be attributed to a particular person. At any time, you can deactivate this function in the display settings of your Google account or generally object to the collection of your data using Google Analytics as described under “Objecting to the collection of data”.
Inclusion of third-party services and content
It is possible that third-party contents such as e.g. videos from YouTube, material from Google Maps, RSS feeds or graphics from other websites are included within the scope of this online offer. This always assumes that the suppliers of such contents (called “third supplier” hereinafter) will note the userʻs IP address, because without the IP address they will not be able to transmit the contents to the respective userʻs browser. Consequently, the IP address is necessary for displaying such content. We attempt to use such content only from third suppliers who only use the IP address to transfer their content. However, we have no means of knowing whether a third supplier stores the IP address, e.g. for statistical purposes. Insofar as we know this, we will inform the users accordingly.
YouTube
Our website uses plug-ins from YouTube, which is operated by Google. The pages are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our website pages featuring a YouTube plug-in, a connection to the YouTube servers is established. Hereby, the YouTube server is informed about which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
This connection is made purely on the basis of your consent in accordance with Article 6 (1) (a) of the GDPR.
Further information about handling user data is provided in YouTubeʻs privacy statement under:
https://www.google.de/intl/de/policies/privacy.
This connection is made purely on the basis of your consent in accordance with Article 6 (1) (a) of the GDPR.
Further information about handling user data is provided in YouTubeʻs privacy statement under:
https://www.google.de/intl/de/policies/privacy.
Facebook
Refratechnik Holding GmbH has not installed any Facebook components (plug-ins) on this website. Facebook is a social network that is linked via a corresponding button. By clicking on the corresponding button(s), you will exit from the Refratechnik Holding GmbH website and enter the Facebook website. The button(s) is/are marked with the Facebook logo and/or the word "Facebook".
If you are logged into your Facebook account, Facebook can assign your visit to your account. If you press the respective button, your browser will transmit the corresponding information directly to Facebook, where it is stored.
For information on purpose and amount of the data collected by Facebook, how it is processed, and what your corresponding rights and setting options are to protect your privacy, please see Facebookʻs privacy statement under https://www.facebook.com/about/privacy/update.
Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Instagram
Refratechnik Holding GmbH has not installed any Instagram components (plug-ins) on this website. Instagram is a social network service that enables users to exchange photos and videos, as well as passing on such data to other social networks. The service is linked via a corresponding button.
By clicking on the corresponding button(s), you will exit from the Refratechnik Holding GmbH website and enter the Instagram website. The button(s) is/are marked with the Instagram logo and/or the word "Instagram".
If you are logged into your Instagram account, Instagram can assign your visit to your account. If you press the respective button, your browser will transmit the corresponding information directly to Instagram, where it is stored.
For information on purpose and amount of the data collected by Instagram, how it is processed, and what your corresponding rights and setting options are to protect your privacy, please see Instagramʻs privacy statement under https://www.Instagram.com/about/privacy.
Instagram is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Twitter
Refratechnik Holding GmbH has not installed any Twitter components (plug-ins) on this website. Twitter is a social network service that enables users to exchange photos and videos, as well as passing on such data to other social networks. The service is linked via a corresponding button.
By clicking on the corresponding button(s), you will exit from the Refratechnik Holding GmbH website and enter the Twitter website. The button(s) is/are marked with the Twitter logo and/or the word "Twitter".
If you are logged into your Twitter account, Twitter can assign your visit to your account. If you press the respective button, your browser will transmit the corresponding information directly to Twitter, where it is stored.
For information on purpose and amount of the data collected by Twitter, how it is processed, and what your corresponding rights and setting options are to protect your privacy, please see Twitterʻs privacy statement under https://twitter.com/privacy.
Twitter is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
Google Maps
This website uses the Google Maps service via an API. The service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Further information about handling user data is provided in YouTubeʻs privacy statement under:
https://www.google.de/intl/de/policies/privacy.
Fonts.com
This website uses "fonts.com"“, a typeface service provided by Monotype Imaging Holdings Inc. (fonts.com). Every time this website is called, files are loaded from a "fonts.com" server for to the display of texts in a certain font. Whenever you visit this website, the anonymous IP 0.0.0.0 is transmitted, but not your IP address. Consequently, no personal data of the website visitor is collected. For more information please visit font.comʻs privacy statement under https://www.monotype.com/legal/privacy-policy.
Your rights regarding processing of your data
Right of access
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If that is the case, the data subject has the right for access to the personal data and the information as detailed in Article 15 GDPR.
Right of rectification
The data subject has the right to demand from the controller the rectification of inaccurate personal data concerning him or her without undue delay. He/she also has the right to have incomplete personal data completed (Article 16 GDPR).
Right to erasure
The data subject has the right to demand from the controller the erasure of personal data concerning him or her, and the controller is obliged to erase personal data without undue delay where one of the grounds listed in Article 17 GDPR applies or the data are no longer required for the respective purpose (right to be forgotten).
Right to restriction of processing
The data subject has the right to demand from the controller the restriction of processing where one of the conditions listed in Article 18 GDPR applies, e.g. if the data subject has objected to his/her data being processed during the period required by the controller to check the facts.
Notification obligation
The data subject has the right to be informed by the controller about the recipients of personal data. The controller will inform every recipient to whom the personal data have been disclosed about rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18, unless this proves impossible or involves disproportionate effort (Article 19 GDPR).
Right to data portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right, if technically feasible, to have those data transferred to another controller (Article 20 GDPR).
Right to object
The data subject has the right to object, on grounds relating to his/her particular situation, at any time to processing of personal data concerning him or her. The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims (Article 21 GDPR).
Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that processing of personal data relating to him or her infringes this Regulation (Article 77 GDPR). The data subject can lodge this complaint with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement. In Bavaria, the supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
