Source: https://rpp-group.com/terms-and-conditions/privacy-policy/
Timestamp: 2019-04-23 08:36:13+00:00

Document:
“Personal data” means any information relating to an identified or identifiable natural person (Art. 4(1) of the GDPR). Data of an identified person might be, for instance, their name or email address. Data, however, might also be personal if the identity is not directly recognisable but could be determined by combining own or external information in order to identify that person. A person is identifiable, if information is available about, e.g. their address or bank details, their date of birth or user name, their IP address and/or location data. This means that here any information is relevant which allows for any type of conclusion to be drawn on a person.
Art. 4(2) of the GDPR provides that “processing” means any operation which is performed on personal data. That means, in particular, the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
We will process the personal data listed in detail under Art. 7-13 below, when you use the Website with the URL www.rpp-group.com. In this process, we will only process data from you that you actively enter on our Website (e.g. by completing forms) or that you provide automatically when using our offer.
Your data will exclusively be processed by us and these data will, as a matter of principle, not be sold, leased or provided to any third parties. Insofar as we use external service providers for the processing of your personal data, that will be done in the context of a cooperation with a so-called data processor, where we act as principal and are authorised to give instructions to our contractors. For the operation of our Website, we use external service providers for hosting, and for the maintenance, update and further development. Insofar as other external service providers will be used for individual processing activities that are listed in Art. 7-13, they will be specified there.
The temporary storage of your IP address by the system is necessary to be able to deliver our Website to the device of any user. To this end, the IP address of the user must be stored for the duration of the session. Your IP address, however, will not be recorded in our log files.
The processing is done to allow for the Website to be called and to ensure its stability and security. In addition, the processing serves for statistical analyses and the improvement of our online offer.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point (f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 6.2.
The data will be erased once they are no longer required to achieve the purpose of their collection. If data are collected to provide the Website, they will be erased once the respective session has been terminated. The log files will be erased after 30 days.
The contact form provided on our Website should offer you a convenient option to contact us. The data transferred with and in the contact form or your email will exclusively be used for the purpose of handling and answering your request.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 7.2. Insofar as the contact by email is aimed at concluding or performing a contract, the data will be processed to perform a contract (Art. 6(1) point b) of the GDPR).
Name of the cookie: … purpose/function: … storage period: This cookie will expire at the end of the browser session. ALTERNATIVE: This cookie will expire ... days after it was stored.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 10.2.
Our Website uses “Google Webfonts“, a font replacement service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Webfonts replaces the standard fonts of your device with fonts from the catalogue of Google when our Website is displayed on your device. If your browser prohibits the integration of Google Webfonts, the texts of our Website will be displayed in the standard fonts of your device. Google fonts will be loaded directly from a Google server. In order to do this, your browser will send a request to a Google server. Your IP address might also be transferred to Google together with the address of our Website. Google Webfonts will not store any cookies on your device. Google states that data which are processed in the context of the Google Webfonts service will be transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They will not be associated with data that are connected with the use of other Google services such as e.g. the search machine of the same name or Gmail. For more information on data privacy at Google Webfonts, please refer to https://developers.google.com/fonts/faq?hl=de-DE&csw=1. For general information on data privacy at Google, please visit http://www.google.com/intl/de-DE/policies/privacy/.
The processing is done to be able to provide you with the text of our Website in a clearly legible and aesthetically pleasing manner.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 13.2.
Personal data might be transferred to Google by using Google Webfonts. Google processes your personal data also in the U.S. and has agreed to comply with the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please refer to https://www.privacyshield.gov/EU-US-Framework.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 14.2.
Personal data might be transferred to Adobe when Adobe Typekit is used. Adobe will process your personal data also in the U.S., possibly through the group company Adobe Systems Incorporated, San Francisco, 345 Park Avenue, San Jose, California 95110, USA, which agreed to comply with the EU‑US Privacy Shield. For more information on the EU-US Privacy Shield, please refer to https://www.privacyshield.gov/EU-US-Framework.
Our Website uses “Google Maps,“ a service for displaying maps provided by the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google“). We use Google Maps for embedding a map that displays our business address in our Website. The map will be loaded directly from a Google server. In order to do this, your browser will send a request to a Google server. Your IP address might also be transferred to Google together with the address of our Website. Google Maps will, however, not store any cookies on your device. If you are logged in to Google when you visit our Website, Google Maps will associate this information to your Google user account. Google will store your data as user profiles and will use them for marketing purposes, for market research and/or the customised configuration of the Google websites. You have a right to object against the creation of user profiles; please directly contact Google to exercise such right. For more information on data privacy at Google, please refer to http://www.google.com/intl/de-DE/policies/privacy/.
The processing is done to be able to display an interactive map on our Website.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 19.2.
Google processes your personal data also in the U.S. and has agreed to comply with the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please refer to https://www.privacyshield.gov/EU-US-Framework.
The processing is done to be able to evaluate the use of our Website. The information gained in the process serve to improve our online presentation and to design it according to demand.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 20.2.
For information on the storage period and an explanation of your control and setting options for cookies, please refer to Art. 8. You may object to the data processing by Google Analytics, at any time, by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you have the option to click on the following link. This will place an opt-out cookie on your device which prevents the future collection of your data when visiting this Website.
Google Analytics is active for us as service provider in the capacity of a processor. Google processes your personal data also in the U.S. and has agreed to comply with the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, please refer to https://www.privacyshield.gov/EU-US-Framework.
Our Website uses “reCAPTCHA”, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (hereinafter referred to as “Google“). reCAPTCHA allows us to verify in forms whether the entry was made by a human or by an automated software – in particular, so-called bots. This enables us to protect our Website against spam and abuse. In this process, your IP address, the time you visited our Website, the mouse movements you made and other data required for the reCAPTCHA services might be transferred to Google. For more information on data privacy at Google, please refer to http://www.google.com/intl/de-DE/policies/privacy/.
The processing is done to protect forms on our Website against abuse and spam.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1) point f) of the GDPR). Our legitimate interest is the purpose mentioned in Art. 26.2.
We integrated a SSL or TLS certificate in our Website to protect your personal data against unauthorised access. SSL means “Secure Sockets Layer” and TLS means “Transport Layer Security” and encrypts the communication of data between a website and the user’s computer. You recognise active SSL and TLS encryption by the small lock logo displayed on the left side of your browser’s address line.
You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed by us. Where that is the case, you have a right of access to the personal data under the conditions set out in Art. 15 of the GDPR and the other information specified in detail in Art. 15 of the GDPR.
You also have the right to obtain from us the erasure of personal data concerning you without undue delay, insofar as one of the grounds listed in Art. 17 of the GDPR applies, e.g. if the data is no longer required in relation to the intended purpose.
You have the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 of the GDPR applies, e.g. if the accuracy of the personal data is contested by you, the data processing will be restricted for a period enabling us to verify the accuracy of the personal data.
You have the right to receive the personal data concerning you under the preconditions set out in Art. 20 of the GDPR in a structured, commonly used and machine-readable format.
When we process personal data concerning you on the basis of Art. 6(1) point f) of the GDPR (for the purposes of the legitimate interests), you have the right to object under the grounds set out in Art. 21 of the GDPR. This, however, shall apply only on grounds relating to your particular situation. After your objection, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms. We also do not need to stop the processing, if it serves for the establishment, exercise or defence of legal claims. In each case – even regardless of a special situation – you have the right to object against the processing of your personal data for direct marketing, at any time.

References: Art. 4
 Art. 7
 Art. 7
 Art. 6
 Art. 7
 Art. 10
 Art. 13
 Art. 14
 Art. 19
 Art. 20
 Art. 8
 Art. 26
 Art. 15
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 21