Source: http://www.robatherm.com/en/privacy-notice
Timestamp: 2019-04-21 12:47:12+00:00

Document:
The protection of your privacy in personal data processing is an important priority for robatherm (“we”, “our”, “us”), which we would like to take into consideration all of our business processes. We process your personal data exclusively in compliance with data protection regulations. In addition to general information (Part 1), this Privacy Notice also includes information concerning the processing of personal data in connection with the use of our website (Part 2), information concerning the processing of your personal data if you are our customer, an interested party (Part 3) or our supplier (Part 4), and information concerning the processing of your personal data as an applicant at our company (Part 5).
• pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority.
In the event that you have questions that are not answered in this privacy statement or if you would like to have more in-depth information for any matter in this regard, please contact us at any time through the contact information listed above.
We do not use purely automated processing operations to reach a decision.
robatherm implements technical and organizational security measures to protect your personal data against accidental or unlawful deletion, modification, or loss, and against unauthorized forwarding or unauthorized access.
This Privacy Notice was last updated in April 2018. It may become necessary to modify this privacy statement due to the continuous development of our website or modified statutory or official requirements. The respective current Privacy Notice is available under https://www.robatherm.com/en/privacy-notice.
When accessing our website through telecommunication services, communication-oriented information (data (e.g. Internet protocol address, referrer, URL, browser) or usage-oriented data (e.g. information concerning start and duration of use and the telecommunication services used by you) are automatically generated by technical means. These generally do not allow us to determine the identity of the website user.
Such data is collected and used to ensure a seamless connectivity of the website and convenient use of our website. This information is furthermore used to evaluate system security and stability and for other administrative purposes. Such data is processed within the scope of our legitimate interests (Art. 6 (1) Clause 1 lit. f GDPR).
Such data will be erased if they are no longer required for the stated purposes.
Our websites and the services offered thereon are supported by technical service providers on our behalf (e.g. hosting). Personal data collected through this website is generally not transmitted unless specified otherwise below. This also applies to a transfer to third countries or international organizations.
This website utilizes cookies. Cookies are text files which a website places on your hard drive. Cookies do not harm your computer and do not contain any viruses.
Information concerning the specific terminal device used by you is stored in a cookie. However, this does not allow us to gain direct knowledge of your identity.
We also use temporary cookies to optimize user-friendliness. They are stored on your terminal device for a specific duration. If you visit our website again, we can automatically recognize that you have previously visited us as well as your previous entries and settings, so that you do not have to enter these again.
Data processed through cookies is necessary for the stated purposes to safeguard our legitimate interests and third-party interests pursuant to Art. 6 (1) Clause 1 lit. f GDPR.
Google uses this information on behalf of the operator of this website to evaluate your use of the website, to create reports concerning website activities, and to provide other services in connection with website use and Internet use vis-à-vis the website operator. The IP address transmitted from your browser within the scope of Google Analytics is not combined with other data held by Google. You can prevent the placement of cookies through a corresponding setting of your browser software; however, this may result in your inability to fully use all functions of our website.
You can also prevent collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following tools.google.com/dlpage/gaoptout.
Alternatively to the browser plug-in, you can click on this link to prevent data collection through Google Analytics on this website in the future. This places an opt-out cookie on your terminal device. If you delete your cookies, you must once again click on the link.
More detailed information concerning data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/privacyoverview.html.
The information in the following subsections relates exclusively to the processing of data from customers and interested parties, possibly also outside of our website. Unless specified otherwise below, the general information from the remaining parts (in particular Part 1) apply.
Data is processed for the purpose of creating offers and processing orders and delivering goods. Data is also processed for invoicing and payment. Data is processed for the performance of the contract to which you are a party or in order to take steps at your request prior to entering into a contract (Art. 6 (1) Clause 1 lit. b GDPR).
Data is also processed for the purpose of a credit check. Our interest in this consists of reviewing the solvency of a customer in order to safeguard against payment defaults. This processing safeguards our legitimate interests (Art. 6 (1) Clause 1 lit. f GDPR), whereby overriding interests of the data subject do not exist.
For the rest, data is processed for the purpose of after sales service, i.e. in order to support you in your use of our products even after a purchase. In this regard, data is processed for the performance of the contract to which you are a party (Art. 6 (1) Clause 1 lit. b GDPR) or insofar as such pertains to direct marketing measures based on our legitimate interest (Art. 6 (1) Clause 1 lit. f GDPR), and subject to consent possibly to be obtained in the individual case (Art. 6 (1) Clause 1 lit. a GDPR).
If you have, in the course of an inquiry and/or the sale of one of our products, provided us with your e-mail address, we use the e-mail address to send you information about similar products and services.
You can object to this processing at any time and free of charge.
The legal basis for the processing of this personal data is - notwithstanding separate consent (Art. 6 (1) Clause 1 lit. a GDPR) - our legitimate interest (Art. 6 (1) Clause 1 lit. f GDPR) in such direct marketing.
The provision of the data listed in Section 11 is not required by law. However, we cannot conclude a contract with you as a customer unless you provide this data, because this data is necessary to conclude a contract.
We are processing and retaining your data only for as long as necessary to provide our services. Data retention may, among other things, continue for as long as claims can be asserted against us from the provided services and/or for as long as we may require the relevant data for the purpose of a legal defense. We are also frequently obligated by law to retain the data for a longer period, generally between 6 to 10 years.
For the purposes of the credits check listed in Section 11 and 12, our credit insurer will receive customer data (company name and address) as well as information concerning the value of goods to be insured so that the insurer can create of an offer for us.
For the rest, we are commissioning external service partners for services (e.g. rectification of defects, startup operation) at our customers. For this purpose, the service partners will receive customer data (e.g. name of the customer, contact information, address). This is for the performance of the contract to which you are a party (Art. 6 (1) Clause 1 lit. b GDPR), whereby we conclude all necessary contracts with our partners.
The information in the following subsections relate exclusively to the processing of supplier data. Unless specified otherwise below, the general information from the remaining parts (in particular Part 1) apply.
Processing is for the purpose of creating inquiries, reviewing offers, and ordering. The data is also processed for invoicing and payment. Our interest in this regard is that we are able to order products from you. This processing safeguards are legitimate interests (Art. 6 (1) Clause 1 lit. f GDPR).
For the rest, processing is for the purpose of invoice auditing. Our interest in this regard is that we do not pay any erroneous invoice amounts. This processing is necessary for performance of the contract (Art. 6 (1) Clause 1 lit. b GDPR).
Your data is also processed for the purpose of payment. This is necessary for the performance of the contract to which you are a party (Art. 6 (1) Clause 1 lit. b GDPR).
The provision of the data listed in Section 16 is not required by law. However, we cannot conclude a contract with you as a supplier unless you provide this data, because this data is necessary to conclude a contract.
We are processing and retaining your data only for as long as necessary for the provision of our services. Data retention may, among other things, continue for as long as claims can be asserted against us based on the provided services and/or for as long as we may require the relevant data for the purpose of a legal defense. We are also frequently obligated by law to retain the data for a longer period, generally between 6 to 10 years.
The information in the following subsections relate exclusively to the processing of data processed within the scope of a job application. Unless specified otherwise below, the general information from the remaining parts (in particular Part 1) apply.
Your data is collected only to fill positions within robatherm. We keep your data confidential and do not pass it on to third parties.
• if relevant for the advertised position: fitness for duty.
Your personal data is generally collected directly from you within the scope of the application process, in particular from the job application documents, the job interview, and the staff questionnaire.
We may also receive data from third parties, (e.g. employment agencies).
We also process your personal data that we permissibly gain from publicly accessible sources (e.g. professional networks).
Data processing chiefly serves to establish an employment relationship. The predominant legal basis for this is Art. 88 (1) GDPR in conjunction with Section 26 (1) German Federal Data Protection Act (new) (Bundesdatenschutzgesetz (neu), BDSG).
Your data is processed exclusively to fill the specific position for which you have applied.
The processing of health data may also be necessary for the assessment of your working capacity pursuant to Art. 9 (2) lit.h GDPR in conjunction with Section 22 (1) lit.b BDSG.
If, in the event of a rejection, you wish to be included in our pool of applicants or if your application is to be taken into consideration for other vacancies in the company/group, we require a declaration of consent from you for this purpose.
If you are hired, we transfer your application records to your personnel file. After the end of your employment, the personal data that we are legally obligated to retain will continue to be stored. This generally is the based on statutory retention obligations and obligations to provide proof, which, among other things, are stipulated in the German Commercial Code (Handelsgesetzbuch, HGB) and the German Tax Code (Abgabenordnung, AO). According to these, retention periods are up to 10 years. Personal data may also be retained for the duration during which claims can be asserted against us (statutory limitation period from 3 or to up to 30 years).
In the event of a rejection, your application documents will be deleted no later than 6 months after the completion of the application process, unless you have granted us consent for a longer retention period (applicant pool).
Within our company, only the persons and functions (e.g. departments) that are involved in the decision concerning your hire will receive your personal data.
We do not transfer your applicant data to third countries.
To consider your application, we require from you the personal data necessary for the decision or to establish the employment relationship. A statutory obligation to provide data does not exist.
Your online application data will be encrypted and transferred with state-of-the-art technology. If you transmit an unsolicited online application to robatherm or apply for a current vacancy, your application data will be stored in our software-based applicant management system.
From processing technology aspects, your written application will be handled like an online application. Your original documents will be returned to you at the latest upon conclusion of the staffing process.
The protection of your privacy in personal data processing is an important priority for robatherm (“we”, “our”, “us”), which we would like to take into consideration in all of our business processes. We process your personal data exclusively in compliance with data protection regulations.
We implement technical and organizational security measures to protect your personal data against accidental or unlawful erasure, modification, or loss, and against unauthorized forwarding or unauthorized access.
When downloading the app, the required information is transmitted to the App Store, in particular the user name, email address, and customer number for your account, the time of download, payment information, and individual device ID number. We have no influence over this collection of data and we are not responsible for it. We process the data only insofar as such is necessary for downloading the mobile app to your mobile end device.
• Language and version of the browser software.
This serves to safeguard our legitimate interests, the legal basis for this is Art. 6 (1) Clause 1 lit. f GDPR. Our interest in this regard is the ability to offer a comfortable use of functions to users.
Data will be erased if the data is no longer required for the stated purposes.
This data is collected to prevent abuse because it allows individual users to be excluded from further use. Name and first name are also requested to enhance the user experience. This is covered by our legitimate interests, Art. 6 (1) Clause 1 lit. f GDPR. Company and address are voluntary information and can be used by the user for customization. Processing is also based on our legitimate interests and also serves to enhance the user experience. This is necessary to safeguard our legitimate interests. The legal basis for this collection is Art. 6 (1) Clause 1 lit. f GDPR.
Data will be erased if it is no longer required for the stated purposes. Data retention may, among other things, continue for as long as claims can be asserted against us based on the provided services and/or for as long as we may require the relevant data for the purpose of a legal defense.
The collection of this data is not required by law or contractually, nor is it obligatory, however, mandatory information is necessary for registration. Non-provision of data will result in your inability to register. As a consequence, the full functionality of the app will not be available to you. A data exchange across multiple devices will then, for example, not be possible.
If you establish contact with us by email or through a contact form, your email address, and - if provided by you - your name and your telephone number will be stored by us to answer your questions. This is necessary for the performance of the contract to which you are a party or in order to take steps prior to entering into a contract (Art. 6 (1) Clause 1 lit. b GDPR) or to safeguard our legitimate interests (Art. 6 (1) Clause 1 lit. f GDPR). Our legitimate interest in this is a satisfactory processing of your inquiry.
We will erase the data collected in this regard after retention is no longer necessary.
We are transmitting data for the purpose of data backup to our service provider tarienna GmbH and deposit a backup copy in a bank deposit box. Our interest in this is to prevent loss of data. Our legitimate interest is the legal basis for this transmission (Art. 6 (1) Clause 1 lit. f GDPR).
No data will be transmitted to countries outside of the European Union or to an international organization.
This app uses Google Analytics, a web analysis service of Google LLC (“Google”). Google Analytics allows us an analysis of your use of the app. For this purpose, information about your use of this app will be generated. The information is transmitted to and stored at a Google server in the USA. If IP anonymization is activated in the app, your IP address is first abbreviated by Google within member states of the European Union or other contracting parties to the Agreement on the European Economic Area. The full IP address is transmitted to a Google server in the USA and abbreviated there only in exceptional cases. IP anonymization is activated.
Google uses this information on behalf of the operator of this app to evaluate your use of the app, to create reports concerning activities, and to provide other services in connection with app use and Internet use vis-à-vis the app operator. The IP address transmitted from your browser within the scope of Google Analytics is not combined with other data held by Google.
More detailed information concerning data protection at Google Analytics is available at https://support.google.com/analytics/answer/6004245?hl=en.
This privacy notice is valid as of April 2018. It may be necessary to modify this privacy statement due to continued development of our website or modified statutory or official requirements. The respective updated privacy notice is available at https://www.robatherm.com/en/privacy-notice.
• Transient cookies: These are erased automatically if you close our mobile app. It includes specifically session cookies. Session cookies store a so-called session ID, which can be used to allocate various inquiries to your mobile app. This allows a recognition of your mobile end device when you next use our mobile app. Session cookies are erased if you log out or close the app.
• Persistent cookies: These are automatically erased after a prespecified period that may differ depending on the cookie.
You can configure the settings of your mobile operating system and of the app as you wish and, e.g., refuse acceptance of third party cookies or all cookies. However, in such a case you may not be able to use all functions of our mobile app.

References: Art. 77
 Art. 6
 Art. 88
 Art. 9
 Art. 6
 Art. 6
 Art. 6