Data privacy statement

Many thanks for your interest in our RHEINZINK website. On our website, we provide you with valuable information concerning our products for roofing and facade applications as well as expert advice. We take the protection of your private data very seriously and we want you to feel safe when visiting our web pages. Our employees are obligated to comply with data privacy laws and are given regular training in the areas of data protection and data security. In the following, we will briefly show you how we protect your data and what that means for you when you use our online services. Naturally, we comply with the statutory provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as other data protection regulations.

The following contains detailed information concerning data protection in our company.

The responsible body for compliance with the GDPR and BDSG is:

RHEINZINK GmbH & Co. KG
Bahnhofstrasse 90
45711 Datteln
Germany

T: +49 2363 605-0
F: +49 2363 605-209
E: info(at)rheinzink.de

Registered company office: Datteln
Reg. court Recklinghausen district court HR A 2939
VAT ID no.: DE 126337704

Personally liable partner:
RHEINZINK Verwaltungsgesellschaft mbH
Registered company office: Datteln
Reg. court Recklinghausen district court HRB 4240

CEO:
Ulrich Grillo (president)
Dr. Michael Knepper

Data protection officer:

Agency - ASB Informationstechnik GmbH
Volker Atzpodin
Buschstrasse 76
47166 Duisburg, Germany
T: +49 2363 605-876
E: datenschutz[at]rheinzink.de

1. Reasons for data acquisition
We record and process your data in order to be able to run our website and give you the best possible service with easy access to our services.

2. What data is recorded, processed or used?
a) Visiting our website
If you access our websites, our server automatically records information of a general nature, particularly for reasons of connection establishment, correct function and system safety. This includes the type of browser being used, the operating system, domain name of the internet service provider, connection data of the computer in use (IP address), the website from which you reached us (referrer URL), the pages of our site that you visit, search strings entered in search engines that brought you to our site, files that you download from our site (e.g. PDF or Word documents) and the date, the time and duration of your visit. We cannot trace this data back to any specific person due to pseudonymisation. This data is not consolidated with other data sources. The legal basis for processing your personal data is Art. 6(1) point f of the GDPR.

b) Contact form
If you contact us via the Contact form and select contact via email, you must state your first and last names, your email address and a message to us. If you select contact via telephone, you must state your first and last names and your telephone number. If you request us to send you planning documents, brochures etc. by post, you must state your first and last names and your postal address. We store this data for the purpose of processing your request and in case any further questions arise. We will not pass this data on to third parties without your permission. The legal basis for processing your personal data is Art. 6(1) point f of the GDPR.

c) Consultant search
If you search for a consultant on our website, you have the option of contacting the consultant directly using a contact form. In this case, you must state your first and last names and the desired form of contact (telephone, email or post). We will then pass this on to the desired consultant. This data is passed on to the consultant to enable them to contact you. The legal basis for processing your personal data is Art. 6(1) point b of the GDPR.

d) Ordering material samples
If you order free material samples on our website, we need your last and first names and your postal address (street, house number, postcode, city, country). We use this data to send you material samples and pass it on to our logistics service provider. The legal basis for processing your personal data is Art. 6(1) point b of the GDPR.

e) Newsletter registration
If you have expressly permitted it, we use your email address to send you our newsletter containing current production information on a regular basis. We use the double opt-in process for newsletter registrations. After registering on our website, you will receive an activation email. You only actually subscribe to the newsletter once you confirm the activation link contained in this email. You can revoke your consent at any time by sending an email to communication@rheinzink.de or by clicking the Unsubscribe link at the end of every newsletter. The legal basis for processing your personal data is Art. 6(1) point a of the GDPR.

f) RHEINZINK Masters
If you register free of charge for RHEINZINK Masters on our website, we need your title, last and first names, date of birth, postal address (street, house number, postcode, city) email address, telephone number, date of your journeyman's certificate and a copy of your journeyman's certificate. We use this data for the RHEINZINK Masters competition, a performance-based competition for students on master craftsmanship courses. Participants can prove their capabilities, particularly technical reasoning and skills, by building a model roof. We will not pass the data on. The legal basis for processing your personal data is Art. 6(1) point b of the GDPR.

g) Visualisation service
If you request visualisation of our products using our website, we require your last and first names, your email address and suitable images for visualising the building project to process your request. We use this data to generate the requested visualisation of our products on your building project. We will not pass the data on. The legal basis for processing your personal data is Art. 6(1) point f of the GDPR.

h) Service description
If you request a service description for your building project using our website, we require your last and first names, your email address and suitable drawings/drafts of your building project to process your request to generate a service description for your building project. We use this data to generate the service description. We will not pass the data on. The legal basis for processing your personal data is Art. 6(1) point a of the GDPR.

i) Training request
If you request a training course using our website, we require your first and last names and the desired contact option (telephone, email or postal) that we should use to contact you to process your request. The legal basis for processing your personal data is Art. 6(1) point b of the GDPR

j) roof drainage measurement
If you wish to conduct a roof drainage measurement using our website, we require your first and last names and your email address to process the measurement. For the purposes of measurement on external servers, we will pass on this data to our service provider, Dendrit Haustechnik-Software GmbH, Hüttenweg 16, 48249 Dülmen, Germany, with whom we have a customer data processing contract. The legal basis for processing your personal data is Art. 6(1) point a of the GDPR.
 

3. Deletion
Personal data will be deleted or blocked as soon as the reason for its storage no longer applies or you demand that the data is deleted. The data will also be deleted when a retention period stipulated by the aforementioned standard expires unless it is necessary to retain the data for conclusion of a contract or fulfilment of a contract or you have granted permission concerning this matter.

4. Cookies
Cookies are used to enhance the use of the website and optimise it in line with website visitors'preferences. For example, your input concerning the selection of a country or language will be saved. Cookies are text files that are created on your hard drive to identify the browser the next time the website is opened.

You can prevent cookies being stored on your hard drive by making the appropriate browser settings. Previously set cookies can be deleted at any time. Please see the respective browser instructions for details of how to delete cookies or prevent them from being stored. If you do not accept the cookies, this can adversely affect your use of our website.

The legal basis for processing cookies is Art. 6(1) point f of the GDPR. Our justified interest in the use of cookies is to be able to provide an attractive website and to analyse user behaviour to improve our services. Some functions of our website cannot be provided if cookies are not used. These functions also require that the browser is recognised after switching between web pages.

5. Data security
We secure our website and other systems against loss, destruction, access, modification or distribution of your data by unauthorised persons using technical and organisational measures. Data is transmitted using SSL encryption. Complete protection against all hazards is not possible despite regular inspections and continual improvement of our safety measures.

7. Google Ads
Our website uses Google Conversion Tracking. If you have reached our website via an ad delivered by Google, Google Ads will set a cookie on your computer. A conversion tracking cookie is set when a user clicks on an ad delivered by Google. These cookies become invalid after 30 days and are not used to identify a person. If the user visits a certain page of our website and the cookie has not yet expired, we and Google can determine that the user clicked on the ad and was forwarded to this web page. Every Google Ads customer receives a different cookie. This prevents cookies from being tracked via the websites of Ads customers. The information gathered using the conversion cookies is used to create conversion statistics lists for Ads customers who have chosen to use conversion tracking. Customers are informed of the total number of users who clicked on their ad and were forwarded to a web page equipped with a conversion tracking tag. However, they do not receive any information that can be used to identify individual users.

If you do not wish to participate in tracking, you can reject the cookies required for this purpose. This can either be done using browser settings that completely deactivate the automatic acceptance of cookies or by setting your browser to block cookies from the domain googleadservices.com.

Please note that you must not delete opt-out cookies if you want to record measurement data. If you have deleted all cookies in your browser, you will have to reset the respective opt-out cookie.

8. Use of Google remarketing
This website uses the Google Inc. remarketing function. This function is used to present website visitors with adverts that are based on their interests within the Google advertising network. A cookie is saved in the browser of the website visitor that allows the visitor to be recognised when they call up a website that belongs to the Google advertising network. Adverts related to the content of websites that the visitor has previously called up and that use the Google remarketing function can be presented to the visitor on these sites.

Google states that they do not collect any data during this procedure. If you still do not wish to participate in the Google remarketing function, you can completely deactivate it by configuring the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising using the advertising network initiative by following the instructions given at http://www.networkadvertising.org/managing/opt_out.asp.
 

9. Social media plug-ins
9.1 Which suppliers do we use?
We use social media plug-ins from the following suppliers on our websites: Facebook, Twitter, Instagram, YouTube and Pinterest. The underlying commercial purposes are considered justified in line with the GDPR. The respective supplier is responsible for operation in line with data protection regulations. We use the two-click Shariff solution developed by c't. This means that when you visit our web page, you will not initially pass on any personal data to the plug-in's supplier. You can identify the provider of the plug-in through the marking on the box above its initial letters or the logo. We give you the option of communicating directly with the plug-in provider by clicking on the button. The plug-in provider is only informed that you have called up the relevant website of our online programme if you click on and thus activate the labelled field. The IP address, date and time of the request, time-zone difference to Greenwich mean time (GMT), the content of the request (specific web page), access status/HTTP status code, respective transferred data volume, website from which the request came, browser, operating system and its interface, language and version of the browser software are also transferred. If Facebook is used in Germany, the respective provider states that the IP address is immediately anonymised after collection. Your personal data is transferred to the respective plug-in provider and stored by them (in the case of US providers: in the USA) when the plug-in is activated. As the plug-in provider collects data specifically using cookies, we recommend deleting all cookies using your browser's security settings before clicking on the greyed-out box.

9.2 Our lack of influence
We do not have any influence on the collected data or data collection processes nor are we party to the whole extent of data collection, the purposes of data processing and the retention periods. We also have no information on deletion of the collected data by the plug-in provider.

9.3 Usage by provider
The plug-in provider stores the data collected concerning you as a usage profiles and uses these for the purposes of advertising, market research and/or needs-based design of their website. Analysis of this kind is conducted particularly (even for users who are not logged in) to display relevant advertising and to inform other users of the social network about your activities on our website. You have the right to object to the compilation of this user profile. You must contact the respective plug-in provider to exercise this right. We use the plug-in to give you the option of interacting with the social networks and other users to enable us to improve our services and develop them to make them more relevant to you. The legal basis for using the plug-in is Art. 6(1) sentence 1 point f of the GDPR.

9.4 Data transfer
Data is transferred regardless of whether you have an account with the plug-in provider and are logged in to the same. If you are logged in to the plug-in provider, data that we collect is assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the web page, the plug-in provider also saves this information in your user account and publicly informs your contacts. We recommend regularly logging out of social networks after use and particularly before activating the button. This prevents the information being allocated to your profile with the plug-in provider.

9.5 Provider's data protection statement
Further information concerning the purpose and extent of data collection and processing by the plug-in provider can be obtained from the data protection statement of the respective provider given below. It also contains further information on your relevant rights and settings options for protecting your privacy.

Addresses of the respective plug-in providers and URLs of their data protection information:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084. Facebook accepts the EU–US privacy shield, https://www.privacyshield.gov/EU-US-Framework

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/en/privacy#update. Twitter accepts the EU–US privacy shield, https://www.privacyshield.gov/EU-US-Framework.

Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA, https://help.instagram.com/519522125107875?helpref=page_content. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

Pinterest Europe Ltd., Palmerston House, 2^nd Floor, Fenian Street, Dublin 2, Ireland, https://policy.pinterest.com/en/privacy-policy is responsible for data protection.


10. Google Maps
We offer Google Maps services on our website. This can be used to show you where to find local contacts, consultants or dealers in your vicinity. These services allow us to show you interactive maps directly on the website and enable you to use convenient map functions. When you visit the website, Google is informed that you have called up the respective subpage of our website. The IP address, date and time of the request, time-zone difference to Greenwich mean time (GMT), the content of the request (specific web page), access status/HTTP status code, respective transferred data volume, website from which the request came, browser, operating system and its interface, language and version of the browser software are also transferred. This is done regardless of whether Google provides a user account via which you are logged in or no user account is used. If you are logged in to Google, your data will be directly matched to your account. If you do not want your data to be matched with your Google profile, log out before activating the button. Google saves your data as a usage profile and uses it for the purposes of advertising, market research and/or needs-based design of their website. Analysis of this kind is conducted particularly (even for users who are not logged in) to provide relevant advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the compilation of this user profile. You must contact Google to exercise this right.

Further information concerning the purpose and extent of data collection and processing by the plug-in provider can be obtained from the data protection statement of the provider. It also contains further information on your relevant rights and settings options for protecting your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google also processes your personal data in the USA and accepts the EU–US privacy shield: https://www.privacyshield.gov/EU-US-Framework.

The legal basis for processing is Art. 6(1) point f of the GDPR.

11. Google Tag Manager
This website uses Google Tag Manager by Google Inc. This service allows website tags to be managed using an interface. The Google Tag Manager only implements the tags. This means that Cookies are not set and no personal data is not recorded. Google Tag Manager triggers other tags which may, for their part, record data. However, Google Tag Manager has no access to this data. If tags have been disabled on domain or cookie level, this setting will remain in  place for all tracking tags implemented with Google Tag Manager.

12. Google reCaptcha
We use Google reCAPTCHA by Google Inc. on our websites. The purpose of reCAPTCHA is to determine whether data entered on our websites (e.g. information entered into a contact form) is being provided by a human user or by an automated program. For this analysis, reCAPTCHA evaluates the IP address and other parameters needed for this service. The data tracked during such analyses are forwarded to Google.
For this function deviating data protection regulations from Google Inc. apply.

For more information about Google reCAPTCHA and to review the Data Privacy Declaration of Google, please follow this link: https://policies.google.com/privacy?hl=en 

13. DoubleClick by Google / DoubleClick Campaign Manager
Our website uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to determine which ads are shown in which browser and can prevent them from being displayed multiple times. In addition, DoubleClick uses cookie IDs to track so-called conversions network related to ad requests. For example, if a user sees a DoubleClick ad and later goes to the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain personally identifiable information.

Due to the marketing tools used, your browser will automatically establish a direct connection to the Google server. We have no influence on the scope and further use of the data collected by the use of this tool by Google and therefore inform you to the best of our knowledge: By including DoubleClick, Google receives the information that you access the corresponding part of our website or clicked an ad from us. If you're registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a chance that the provider will find and store your IP address.

In addition, the usage of “DoubleClick floodlight cookies” allows us to understand if you perform certain actions on our website after you have clicked on one of our display/video ads on Google or another platform through DoubleClick (conversion tracking). DoubleClick uses this cookie to understand the content that you have interacted with on our websites to send you targeted advertisements.

You can prevent participation in this tracking process in a number of ways: a) by setting your browser software accordingly, in particular, the suppression of third-party cookies will prevent you from receiving any third party advertisements; b) by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.com/settings/ads, this setting is deleted when you delete your cookies; c) by deactivating the interest-based advertisements of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting is being deleted when you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We point out that in this case you may not be able to use all features of this offer to the fullest.

To learn more about DoubleClick by Google, visit https://www.google.com/doubleclick and support.google.com/adsense/answer/2839090, and Google privacy policy in general: https://www.google.com/intl/en/policies/privacy. You can also visit the website of Network Advertising Initiative (NAI): www.networkadvertising.org.

14. ajax.googleapis.com/ jQuery
This website uses Ajax and jQuery technologies to optimize page loading speed. In this regard, program libraries are loaded from Google servers. For this purpose Content Delivery Network (CDN) from Google is used. If you previously used jQuery on another page of the Google CDN, your browser will fall back on the cached copy. If your browser hasn’t cached a copy or downloads the file from Google CDN for any other reason, data is sent from your browser to Google Inc.
For more information and to review the Data Privacy Declaration of Google, please follow this link: https://policies.google.com/privacy?hl=en

15. Rights of affected persons
a) Information, blocking, correction, limitation and deletion
If your personal data is processed, you are the affected person in line with the GDPR and you have the right to request information on the data we have stored concerning you. You also have the right to correct, block, limit the processing of and/or delete your data.

If you have exercised the right to correct, delete or limit the processing of your data, we are obligated to inform all recipients to whom your personal data was disclosed of this correction or deletion of data or limitation of data processing unless this is impossible or would entail a disproportionate effort. You have the right to be informed of these recipients.

b) Right to data portability
You have the right to be provided with personal data concerning you that you have provided in a structured, conventional and machine-readable format.

c) Right of objection
You have the right to object at any time to the processing of personal data concerning you conducted on the basis of Art. 6(1) point e or f of the GDPR. We will then no longer process personal data concerning you unless we can prove compelling and legitimate reasons for the processing that outweigh your interests, rights and freedoms or if processing serves to assert, exercise or defend legal claims.

d) Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent does not affect the legality of the processing conducted on the basis of your consent before this was withdrawn.
 

16. Right of appeal to a supervisory authority
Regardless of other administrative or legal appeal, you have the right to appeal to a supervisory authority, particularly in the member state of your residence, workplace or the location of the alleged violation if you are of the opinion that the processing of personal data related to you violates the GDPR.

The supervisory authority to whom the appeal is submitted will inform the plaintiff of the progress and results of their appeal including the possibility to appeal in line with Art. 78 of the GDPR.

Datteln, 06/11/2020