Source: https://us.roehm.biz/index.php?id=277&amp;L=1
Timestamp: 2019-04-19 18:26:11+00:00

Document:
The protection of personal data has a high priority in our company.
The following provides you with information regarding the collection of personal data when using our website. Personal data are all data pertaining to you personally, such as name, address, email addresses, user behaviour, IP address.
We collect and use the personal data of our users solely to the extent necessary to provide a functionally operational website and our content and services. Collection and application of the personal data of our users is consistently carried out solely with the consent of the user. An exception applies in certain cases where prior acquisition of consent is not de facto possible and processing of the data in question is permitted on the basis of statutory provisions.
To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) provides the legal basis for the processing of personal data.
With regard to the processing of personal data that are necessary for the performance of a contract to which the data subject is party, the commensurate legal basis is provided under Art. 6 (1) (b) GDPR. This also applies in respect of processing necessary for steps undertaken prior to entering into a contract. To the extent that processing of personal data is required for compliance with a legal obligation to which our company is subject, the commensurate legal basis is provided under Art. 6. (1) (c) GDPR.
In the event that the vital interests of the data subject or of another natural person require the processing of personal data, the commensurate legal basis is provided under Art. 6 (1) (d) GDPR.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and provided such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, the commensurate legal basis for processing is provided under Art. 6 (1) (f) GDPR.
Personal data pertaining to the data subject will be promptly erased or rendered unavailable where the intended purpose of storage no longer applies. Storage may also occur where provided for by the European or national legislatures in Union directives, laws or other regulations to which the controller is subject. Data is also rendered unavailable or erased upon expiry of a storage period prescribed under the aforestated standards, save for where continued storage of the data in question is necessary for the conclusion of a contract or contract performance.
To some extent we use third-party service providers to process your data on our website. We carefully select and appoint these providers, who are subject to our instructions and regularly audited. Data is not transmitted to countries outside the EU or EEA (so-called third-countries).
These data are also stored in log files on our system; not, however, the IP addresses of the user or other data enabling assignment of the data to an individual user. Storage of these data together with other personal user data does not occur.
Legal basis for the temporary storage of data is provided under Art. 6 (1) (f) GDPR.
Temporary storage of the IP address is required by the system to facilitate delivery of the website to the user's computer. As such, the user IP address must be stored for the duration of the session.
These purposes define our legitimate interests in data processing in compliance with Art. 6 (1) (f) GDPR.
The data are erased once they are no longer required to achieve the purpose for which they were collected. Where data are collected to facilitate provision of the website, this occurs when the respective session is concluded.
Collection of data to facilitate provision of the website and the storage of data in log files is a necessary requirement for operation of the Internet site; consequently, the user is not availed of an opt-out option.
User data collected by technically necessary cookies are not used to create user profiles.
These purposes define our legitimate interests in the processing of personal data in compliance with Art. 6 (1) (f) GDPR.
Our website contains a contact form which can be used to contact us electronically. When a user employs this option, data entered into the input screen are transmitted to us and stored.
Your consent to process such data is obtained with reference to this privacy statement within the scope of the submitting procedure.
Alternatively, you can also contact us using the email address provided. In this case, personal user data that are transmitted with the email are stored.
In this connection, the data are not sent to any third parties and are used solely to process the dialogue.
The commensurate legal basis for processing the data with the consent of the user is provided under Art. 6 (1) (a) GDPR.
The commensurate legal basis for processing data transmitted within the course of sending an email is provided under Art. 6 (1) (f) GDPR. Where email contact is for the purpose of concluding a contract, the additional legal basis for commensurate processing is provided under Art. 6 (1) (b) GDPR.
We use the personal data obtained from the input screen solely for the purposes of processing your communication with us. In the case of contact by email, this also defines the requisite legitimate interests for processing the data.
Other personal data processed during the dispatching procedure serve to prevent misuse of the contact form and ensure the security of our IT systems.
The data are erased once they are no longer required to achieve the purpose for which they were collected. In respect of personal data provided within the contact form input screen and data sent by email, this is when the respective dialogue with the user has ended. Accordingly, the dialogue is deemed concluded once the relevant circumstances demonstrate that the issue has been finally resolved.
Additional personal data collected during the sending process are erased within a period of seven days at the latest.
The user may withdraw their consent for the processing of personal data at any time. Users contacting us by email can object to the storage of their personal data at any time. In such cases, the commensurate dialogue cannot be continued. Withdrawal can be effected without observing any formal requirements and should be addressed to the controller.
In any such case, all personal data stored within the course of communication will be erased.
This website uses Google Analytics, a web analysis service provided by Google Inc ('Google'). Google Analytics uses so-called 'cookies', text files that are stored on your computer to enable analysis of your website usage. The information generated by the cookie concerning your use of this website will generally be forwarded to a Google server in the USA and stored there. Within member states of the European Union or other states that are party to the European Economic Area Agreement, if IP anonymisation is activated on this website Google will first truncate your IP address. Only in exceptional cases will the full IP address be passed to and truncated by Google on a server in the USA. On behalf of the operator of this website, Google will use this information to analyse your use of the website, create reports on website activity and provide additional services associated with use of the website and the Internet to the website operator.
The IP address sent from your browser within the scope of Google Analytics will not be combined with other Google data.
This website uses Google Analytics with the extension '_anonymizeIp()', with the result that IP addresses are processed in truncated form to prevent individual persons being identified. Should any data concerning you become personally identifiable, this action will be instantly precluded and the commensurate personal data immediately erased.
We use Google Analytics to analyse use of our website and facilitate regular improvement. The statistical information obtained is used to enhance our services and make them more appealing for you as the user. For the exceptional cases where personal data is transmitted to the USA, Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for the use of Google Analytics is provided under Art. 6 (1) (f) GDPR.
You can prevent the storage of cookies by setting your browser software accordingly; however, please be aware that this may mean you are unable to use the full functionality of the website. You can also prevent the collection and processing by Google of data generated by the cookie regarding your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.
The plug-in provider stores data collected in relation to you as a user profile and uses this profile for the purposes of advertising, market research and/or demand-oriented design of its website. Analysis of this kind is carried out (including for users not logged on), in particular, for the presentation of demand-oriented advertising and to inform other users of the social network about your activities on our website.
The data transfer occurs regardless of whether you have an account and are logged on with the plug-in provider. If you are logged on with the plug-in provider, the data we collect concerning you will be directly assigned to your account with the plug-in provider. If you click the activate button and, for example, link the page, the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you regularly log out after using a social network and particularly before activating the button in order to prevent assignment of your profile to the plug-in provider.
a) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en. Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Legal basis for the use of plug-ins is provided under Art. 6 (1) (f) GDPR.
Plug-ins allow us to offer you the option of interacting with the social networks and other users so that we can enhance our services and make them more appealing for you as the user.
Please note that we have no influence over the data collected and data processing procedures, nor are the full extent of data collection, purposes of processing or storage periods known to us. Similarly, we do not have any information regarding the erasure of data collected by the plug-in provider.
You have the right to object to the creation of this user profile; to exercise this right you will need to contact the plug-in provider in question.
We use 'Google reCAPTCHA' (hereinafter 'reCAPTCHA') on our websites. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ('Google').
reCAPTCHA is used to check whether data input on our websites (e.g. in a contact form) is entered by a human or an automated program. To this end, reCAPTCHA uses various features to analyse the website user's behaviour. This analysis starts automatically when the website visitor accesses the website. reCAPTCHA evaluates various information for the analysis (e.g. IP address, length of time spent on the website by the website visitor or user mouse movements). Data collected by the analysis are sent to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not notified that such analysis is occurring.
The commensurate legal basis for data processing is provided under Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web services from misuse through automated spying and SPAM.
Each data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. With respect to the right of access and the right to erasure, limitations in accordance with Ss. 34 and 35 BDSG (German Federal Data Protection Act) apply. In addition, the right to lodge a complaint with a supervisory authority is also afforded (Article 77 GDPR in combination with S. 19 BDSG).
Consent granted to us for the processing of personal data can be withdrawn at any time. This also applies for withdrawal of declarations of consent communicated to us prior to application of the EU General Data Protection Regulation, i. e. before 25 May 2018. Please note that withdrawal has future effect and will not apply to processing carried out prior to withdrawal. Withdrawal can be effected without observing any formal requirements and should be addressed to the controller.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6