Source: https://www.blauer-engel.de/en/data-protection-policy
Timestamp: 2019-04-23 10:34:50+00:00

Document:
RAL stands for quality in many areas of daily life. This also applies to the processing of your data. In order to ensure the security and privacy of your data, it is our aim to collect as little personal data as possible from you and to handle any required data as securely as possible.
Please find information below on what personal data we collect and how we process this data.
According to Art. 4 (1) of the EU DS-GVO, personal data describes all information relating either directly or indirectly to an identified or identifiable natural person. This includes, for example, your name, your contact details and data which you provide when registering for a customer account, processing your orders or as part of an application.
The stored data is not combined with other sources of data. It is generally not possible for us to assign the data to any specific person. The data is not processed for the purpose of gaining further information about the respective visitor to the website.
We reserve the right to store the IP addresses of visitors to our websites for a maximum time period of three months. The logging of this data serves to recognise advanced persistent threats and limit and resolve faults, as well as for ensuring system and data security.
We have a legitimate interest in the sense of Art. 6 (1) Sentence 1 f) of the EU DS-GVO for processing the data for the purposes described above.
Visitors can request information by telephone and send messages to us using a contact form on the website. All information is transferred to us voluntarily by the person making the enquiry and they thus give their consent for the processing of their personal data. In order for us to answer the enquiry by email, it is necessary for the person to provide us with a valid email address. The data is exclusively processed for the purposes of providing advice on the telephone or for handling and answering enquiries submitted using the contact form.
The processing of this data is carried out based on the consent given voluntarily in accordance with Art. 6 (1) Sentence 1 a) of the EU DS-GVO. The personal data collected due to the use of the contact form is automatically deleted as soon as the enquiry has been dealt with and there is no reason for it to be stored for a longer period of time.
By subscribing to the newsletter, you expressly give your consent for the processing of the personal data that was voluntarily submitted to us. The data collected during the subscription process is exclusively used for sending the newsletter. We use a double opt-in process to ensure that you only receive the newsletter when you really want to. After subscribing to the newsletter for the first time, we send you an email containing a link to confirm that you really want to receive our newsletter. It is possible to unsubscribe from our newsletter at any time. This is possible using a special link at the end of every newsletter or by sending us an email. Please refer to section 5.7 “Right to withdraw consent” for more details.
The legal basis for the processing of personal data for the distribution of newsletters and the associated activities is your consent given in accordance with Art. 6 (1) Sentence 1 a) of the EU DS-GVO.
It is possible to deactivate the saving of cookies at any time. The help function in the menu for most browsers (e.g. Internet Explorer or Firefox) will describe how users and visitors to our application portal can prevent the browser accepting cookies, how the user and visitor to our website can be informed by the browser when they receive a new cookie or also how he or she can delete all of the cookies already received and block the saving of any cookies in the future. In the latter case, the previously described functions (login and administration options) will no longer be available. It is necessary to remove the block on cookies in order to use these functions.
This website uses functions provided by the web analysis service Google Analytics. The supplier is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are small text files that are saved on your computer and which enable an analysis of the use of the website. The information collected by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA.
The saving of cookies from Google Analytics is carried out on the basis of Art. 6 (1) f) of the EU DS-GVO. The operator of the website has a legitimate interest in analysing the user behaviour in order to optimise both their website and also their advertising.
We have activated the IP anonymisation function on this website. As a result, your IP address will be shortened by Google within the member states of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and then shortened. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to create reports on the activity on the website and to provide additional services connected with the use of the website and the Internet. The IP address transferred by your browser during the use of Google Analytics is not combined with other data from Google.
You can prevent cookies from being saved on your computer by changing the corresponding setting in your browser software; we expressly inform you, however, that you may not be able to use the full scope of all of the features of this website in this case. Furthermore, you can prevent the collection of the information generated by the cookie that is related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin that can be found under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can prevent the collection of your user data by Google Analytics by clicking on the following link. This will save an opt-out cookie on your system that will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.
This website use the function “Demographics” from Google Analytics. This enables reports to be created that contain information on the age, gender and interests of the visitors to the website. This data is sourced from interest-related advertising, as well as from visitor data from third party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the display settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Withdrawing your consent for the collection of data”.
We use “Google reCAPTCHA” (hereinafter called “reCAPTCHA”) on our websites. The supplier is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).
reCAPTCHA checks whether the data entered on our websites (e.g. in contact forms) comes from a human or an automated program. For this purpose, reCAPTCHA analyses the behaviour of a visitor to the website based on various different characteristics. This analysis begins automatically as soon as the visitor accesses the website. reCAPTCHA evaluates various information during the analysis (e.g. IP address, length of time the visitor remains on the website or the mouse movements made by the user). The data collected during this analysis is transferred to Google.
These reCAPTCHA analyses run completely in the background. Visitors to the website are not informed that an analysis is being carried out.
This data is processed on the basis of Art. 6 (1) f) of the EU DS-GVO. The operator of the website has a legitimate interest in protecting their website against improper automated spying and spam.
Twitter, operated by Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103.
The buttons act as hyperlinks to the relevant web pages. No data is transferred by merely linking to these sites.
Videos from the YouTube platform are sometimes embedded into our websites. YouTube is a portal provided by YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA and a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. While playing the video files from YouTube, a connection to the YouTube servers is established and data about accessing this video is transferred to YouTube. This includes at least the following information: the IP address, data and time of access and the website you are visiting. If you are also logged into your YouTube account at the same time, information on the accessed video file will be allocated to your YouTube account. If you want to prevent this from happening, you either have to log out from your YouTube account before visiting our website or activate the corresponding settings in your YouTube user account.
We use the “privacy-enhanced mode” function to ensure that the connection data is only transferred to the YouTube server if a video is actually played.
To ensure the functionality of the platform and analyse user behaviour, YouTube permanently saves cookies on your end device. If you do not agree to the saving of this data, you can prevent it using the corresponding settings on your Internet browser. You can find further information about this above under 3.5 “Cookies”.
Our legitimate interest lies in improving the quality of our Internet presence. The legal basis for the processing of this data is thus Art. 6 (1) f) of the EU DS-GVO.
Please bear in mind that emails are not protected against unauthorised access, falsification, etc. Therefore, please do not send any confidential information (e.g. account number, passwords, etc.) to us by email.
it is necessary in accordance with Art. 6 (1) Sentence 1 b) of the EU DS-GVO for the performance of a contract to which the data subject is a party.
If you establish that the personal data we hold about you is incorrect, you can request that we rectify the incorrect data. You also have a right to request that incomplete data is completed.
The right to erasure does not exist if, in the event of legal non-automated data processing, the erasure of the data would only be possible at a disproportionate amount of cost and effort due to the special type of storage and you only have a low level of interest in its erasure. In this case, the processing of this data will be restricted instead of the data being erased.
you contest the accuracy of the personal data. In this case, a restriction can be requested for the period required to verify the accuracy of the data.
the processing is unlawful and the data subject requests a restriction of the use of their personal data instead of the erasure of the data.
your personal data is no longer required by us for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims.
you have raised an objection in accordance with Art. 21 (1) of the EU DS-GVO. A restriction of processing can be requested pending the verification of whether we have legitimate grounds that override your grounds for a restriction of processing.
A restriction of processing means that the personal data will only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We are obligated to inform you before the restriction of processing is lifted by us.
You have the right to receive from us the personal data that you have provided to us in a structured, commonly used and machine-readable format. You have the right to have this data transferred to another controller without hindrance from us. If technically feasible, you can request that we directly transfer your personal data to another controller.
If you believe that the processing of the personal data about you is unlawful, you can lodge a complaint with a data protection supervisory authority that is responsible for your place of residence, place of work or the place of the alleged infringement.
Your consent for the processing of personal data can be withdrawn at any time with future effect. The withdrawal of consent can also apply to individual sections of the data processing (e.g. unsubscribing from the newsletter).
Please note that even if you withdraw your consent, processing of the data may still be required due to legal regulations.
Please send the notification about your withdrawal of consent to us using the contact details stated above in section 1 and please understand that some identification may be required in the event of a withdrawal of consent to prevent any misuse.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21