Source: https://www.reichhart.eu/data-protection.html
Timestamp: 2019-04-21 13:13:47+00:00

Document:
As a general rule, you can use our website without disclosing your identity. When you visit our web pages, this is logged for security analysis and to prevent attacks. The data collected in this process are not assigned to specific persons, but could possibly allow identification. Neither directly personal nor pseudonymized user profiles are created. These data are not combined with other data sources. IP addresses are only evaluated if there is an attack.
Furthermore, we only collect personal data in connection with the operation of our websites, if you provide us with such data voluntarily (e.g., through registration, contact inquiries, surveys, etc.), and if we are entitled to process or use such data on the basis of your consent or on the basis of a statutory provision. Only a few authorized persons have access to it.
Visitors and users of the website (hereinafter, we refer to such data subjects collectively as "users").
We inform you of the legal basis of our data processing, in accordance with Art. 13 GDPR. If the legal basis is not mentioned in the data protection declaration, the following applies: the legal basis for obtaining consents is Art. 6 para. 1 (a) and Art. 7 GDPR; the legal basis for processing for the performance of our services, the performance of contractual measures, and for answering inquiries is Art. 6 para. 1 (b) GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 (c) GDPR; and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 (f) GDPR. Article 6 para 1 (d) GDPR is the legal basis, if the vital interests of the data subject or another natural person make the processing of personal data necessary.
The data will not be transferred to third parties outside the REICHHART group of companies without your express consent.
We would like to point out that data transmission over the Internet (e.g., communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.
If, as part of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit such data to them or otherwise grant access to the data, this will only be done on the basis of a legal authorization (e.g., if a transmission of the data to third parties, in accordance with Art. 6 para. 1 (b) GDPR is required to fulfill the contract), if you have consented to a legal obligation, or on the basis of our legitimate interests (e.g., the use of agents, web hosters, etc.).
If we commission third parties to process data on the basis of a "processor contract", this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs as part of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or leave the data in a third country, in accordance with the special provisions of Art. 44 ff. GDPR. This means, for example, that processing is carried out on the basis of special guarantees, such as the officially recognized determination of a level of data protection that corresponds to that of the EU (e.g., by the "Privacy Shield" for the USA) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
You have the right to request confirmation as to whether the data concerned are being processed and to request information about these data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have the right, under Art. 16 GDPR, to request the completion of data concerning you or the rectification of inaccurate data concerning you.
You have the right, under the provisions of Art. 17 GDPR, to demand that relevant data be erased immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.
You have the right under Art. 20 GDPR, to request receipt of the data concerning you, which you have provided to us, and to transmit it to another controller.
You also have the right, under Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.
You have the right, under Art. 7 para. 3 GDPR, to withdraw consent already given, with future effect.
Under Art. 21 GDPR, you can object to the future processing of the data concerning you at any time. In particular, you can lodge an objection against processing for direct marketing purposes.
Retention is in accordance with the statutory requirements in Germany: retention is for 6 years in accordance with Section 257 (1) of the German Commercial Code (HGB) (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) of the German Fiscal code (AO) (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the purpose of operating this website.
As part of this service, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, and meta- and communication data of customers, interested parties, and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of this website, in accordance with Art. 6 Para. 1 (f) GDPR in conjunction with Art. 28 GDPR (conclusion of a processor contract).
We, or our hosting provider, collect data (so-called, server log files) on each access to the server on which this service is located, on the basis of our legitimate interests within the meaning of Art. 6 para. 1 (f) GDPR. The access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
Log file information is stored for a maximum of 6 weeks for security reasons (e.g., to investigate misuse or fraud) and then erased. Data whose further storage is required for evidentiary purposes are excluded from erasure until the respective incident has been finally clarified.
When contact is made with us (for example via a contact form, email, telephone, or social media), the user's information is processed in accordance with Art. 6 para. 1 (b) GDPR, in order to deal with the inquiry and any follow-up. The user's information may be stored in a customer relationship management system ("CRM system") or a comparable request system. We erase this information if it is no longer required. We review this requirement every two years; the statutory archiving obligations also apply.
This website uses Google Analytics, a web analysis service provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses "cookies", text files that are stored on users' computers and allow an analysis of the use of the website by them. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google will use this information, on our behalf, to evaluate the use of our website by the user, compile reports on website activity, and provide us with other services relating to website and Internet use.
We only use Google Analytics with activated IP anonymization. This means that Google will abbreviate the IP address of users within member states of the European Union or in other states party to the Agreement on the European Economic Area in advance. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We use the "demographic features" function of Google Analytics. This enables the creation of reports that contain information on the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this feature at any time from your Google Account ad preferences or opt-out of Google Analytics collecting your information as described in the "Opt-out of data collection" section.
This website uses so-called social plugins ("plugins") produced by the Facebook social network, provided by Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins are marked with the Facebook logo or the "Like button". An overview of the Facebook plugins and their appearance can be found here.
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. This enables Facebook to receive the information that your browser has accessed our website. If you click on the Facebook “Like Button” while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to match the visit to our website to your Facebook user account.
Please note, that we, as the provider of the pages, have no knowledge of the content of the transmitted information or of its use by Facebook. For more information about the purpose and scope of data collection, the further processing and use of the data by Facebook, and your rights and setting options for protecting your privacy, please see Facebook's data policy. If you do not want Facebook to associate the information collected through our website with your Facebook account, please log out of your Facebook account.
In some cases we use the Bitly service to shorten URLs. To improve the service Bitly stores, among other things, the number of clicks, the IP address, the website visited, the day and time of the visit and information about the sharing and commenting of the links generated by Bitly via social media.
We maintain an online presence within social networks and platforms in order to communicate with active customers, interested parties, and users and to inform them about our services. When accessing the such networks and platforms, the terms and conditions and privacy policies of their respective operators apply.
Our data protection officer is at your disposal for information and suggestions on the subject of data protection.
If, despite our best efforts to ensure data correctness, incorrect information is stored, we will correct this at your request.

References: Art. 13
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 44
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 77
 Art. 7
 Art. 21
 Art. 6
 Art. 28
 Art. 6
 Art. 6