Data privacy at WAREMA
Data privacy information and accountable body with regards to data privacy
We would like to thank you for visiting our website and are delighted that you are interested in our company. The protection of your personal data is an important issue for us. We process your data in compliance with the applicable legal provisions for protection of personal data, in particular the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementing laws that are applicable to our company.
Our data privacy statement will explain to you what personal data we gather from you through our website, what we use them for, when we delete them and how your data are given the best protection through security measures. In addition we will advise you of the legal foundation that accordingly allows us to process data.
What’s more, you will be informed of your rights established in law in relation to the processing of these data.
Personal data are information that makes it possible to identify a natural person. This includes; in particular; names, dates of birth, addresses, phone numbers and e-mail addresses, as well as your IP address.
Data are anonymous if no personal connection to the user can be established.
The accountable body for the purposes of data privacy law is:
WAREMA Renkhoff SE
Please direct any questions, complaints or messages to the email address: firstname.lastname@example.org
Your rights as a data subject
Firstly we would like to take this opportunity to inform you of your rights as a data subject. These rights are standardised in articles 15 – 22 of the EU-GDPR. This includes:
The right of access (art. 15 of EU-GDPR),
The right to erasure (art. 17 of EU-GDPR),
The right to rectification (art. 16 of EU-GDPR),
The right to data portability (art. 20 of EU-GDPR),
The right to restriction of processing (art. 18 of EU-GDPR),
The right to object to data processing (art. 21 of EU-GDPR).
To assert these rights, please contact:
WAREMA Renkhoff SE
Data protection officer
The same applies if you have questions about data processing in our company or would like to revoke granted consent. You also have a right of complaint to a data protection authority.
Rights to object
If we process your personal data for the purpose of direct advertising, you have the right to object to this data processing at any time without stating any reasons. This also applies to any profiling, insofar as it is associated with direct advertising.
If you object to processing for purposes of direct advertising we will no longer use your personal data for these purposes. Objection is free of charge and can be submitted in any form, preferably to:
WAREMA Renkhoff SE
In the event that we process your data in order to maintain justified interests, you can object to this processing at any time for reasons that arise from your particular situation; this also applies to any profiling supported by these regulations.
We will then no longer process your personal data unless we can demonstrate mandatory legitimate reasons for processing that outweigh your interests, rights and freedoms or processing is done for the purposes of asserting, exercising or defending legal claims.
Data collection / Personal data
We generally do not require any personal data from you when you visit our website. You only transmit data to our web server when our website is accessed (out of technical necessity) via your internet browser. During the ongoing connection for communication between your internet browser and our web server, the following data are recorded:
- Web browser and operating system used
- Name of the internet service provider
- Information about the website from which you are visiting us
- Information about the webpages that you access on our site, as well as date and time of visit
- Name of the requested file, whether file e.g. has been transmitted, data volume transmitted
- The IP address assigned by your internet service provider
For reasons of technical security, particularly to defend against attacks on our web servers, these data are stored by us according to art. 6, para. 1, point f of the EU-GDPR. After seven days at the latest the data are anonymised by shortening the IP address to the domain level. A connection to the individual user is not established. The data are processed for statistical purposes besides only in their anonymised form.
Other data collections
The regulations of the EU-GDPR and all other applicable regulations from data protection law are observed for processing your personal data. The legal foundations for data processing are derived in particular from art. 6 of the EU-GDPR.
We use your data for initial business contact, to meet contractual and legal obligations, to execute the contractual relationship, to offer products and services and to improve relations with customers, which may also include analyses for marketing purposes and direct advertising.
Your consent to data processing may also represent a permission instruction. Before giving consent, we shall clarify the purpose of data processing and your right of revocation for you.
This is the case, e.g. if your consent is received (art. 6, para. 1, point a of the EU-GDPR), the data are required in order to fulfil a contract / pre-contractual measures (art. 6, para. 1, point b of the EU-GDPR), the data are required in order to fulfil a legal obligation (art. 6, para. 1, point c of the EU-GDPR) or the data are required in order to maintain justified interests of our company, insofar as your legitimate interests do not outweigh them (art. 6, para. 1, point f of the EU-GDPR).
The collected personal data will of course be treated with confidentiality. Only authorised persons in our company who are each involved with the technical, commercial, editorial or customer management support, have access to your data. We will forward your data to third parties only in the context of the legal regulations or with corresponding consent, unless we are obliged to do so owing to mandatory legal requirements.
If the consent also relates to processing particular categories of personal data, we will explicitly refer to them in the consent. Particular categories of personal data are processed only if this is required by legal specifications and there is no reason to assume that this is outweighed by your legitimate interest to the exclusion of processing.
Contact form / Contact via e-mail (legal basis art. 6, para. 1 point. a, b EU-GDPR)
There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process your data given in the contact form in order to establish contact and answer your questions and wishes. In this case the principle of data economy and data avoidance is observed by requiring you to enter only the data that we strictly need from you in order to set up contact. These are your e-mail address and the message content itself. In addition your IP address is processed out of technical necessity and for legal safeguarding. All other data are voluntary fields and can be entered optionally (e.g. to answer your questions more individually).
If you contact us via e-mail, we will process the personal data shared in the e-mail only for the purpose of processing your query. No data collection beyond that takes place. Wenn Sie dies nicht wünschen, können Sie jederzeit der Verwendung Ihrer personenbezogenen Daten zum Zwecke der Direktwerbung widersprechen; dies gilt auch für ein Profiling, soweit es mit der Direktwerbung in Verbindung steht. Wenn Sie Widerspruch einlegen, werden wir Ihre Daten für diesen Zweck nicht mehr verarbeiten.
The objection can be made free of charge and without form and should be sent to email@example.com or by mail to WAREMA Renkhoff SE, Hans-Wilhelm-Renkhoff-Straße 2, D-97828 Marktheidenfeld.
Automated decision-making including profiling according to art. 22, parap. 1 and 4 EU-GDPR
No automated procedures are used to find out, for example, more about your interests or your purchasing behaviour based on your personal data (so-called profiling).
We do not use any fully automated processing procedures to bring about a decision.
Cookies (art. 6, para. 1, point fof the EU-GDPR or art. 6, para. 1, pooint a oft he EU-GDPR with consent)
Our websites use so-called cookies in multiple places. They are used to make our internet presence more user-friendly, effective and secure. Cookies are small text files, which are stored on your computer and saved by your browser (locally on your hard drive).
These cookies allow us to perform an analysis of how users use our websites. This means that we can design the content of the websites to suit visitors’ needs. In addition, thanks to the cookies we have the option of measuring the effectiveness of a certain display and to place it for example depending on the thematic interests of the users. Most of the cookies that we use are so-called “session cookies”. These are automatically erased after your visit. Permanent cookies are automatically erased from your computer when their period of validity (generally speaking six months) has been reached or if you delete them yourself before the period of validity has elapsed.
Most web browsers accept cookies automatically. You can however also generally change your browser’s settings if you would rather not send the information. You can then continue to use what our website has to offer without any restrictions (exception: configuration tools, arranging meetings with a WAREMA dealer).
Please note: If you deactivate setting cookies, not all functions of our website may be usable to their full extent under some circumstances.
Consent-Management through Borlabs (art. 6 para. I lit. F EU-GDPR)
This website uses Borlabs’ cookie content technology to obtain your consent to the storage of certain additional cookies on your terminal device, which are beyond the scope of technical necessity, and to document these cookies in a data protection-compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Website: https://de.borlabs.io
The purpose of the data processing is the analysis and management of the consents granted, in order to comply with our obligation of an EU-DS GMO-compliant consent management. The use of Borlabs serves the purpose of proving granted and not granted consents as well as their management. Using User Centrics’ technology, you can, for example, give us your consent to analyze your use of our site to make it even better for you, or to track how you navigate our site to provide you with more personalized product recommendations that better match your interests. You can use the tool to give your consent for different technologies and even individually select which data collection you would like us to allow and which not. Furthermore, you also have the possibility to revoke and manage once given consent at any time by accessing the Consent Banner via the fingerprint icon in the lower left corner, which you can find everywhere on our website, and update your preferences.
The legal basis for the management of your consents to the processing of your personal data is Art. 6 para. 1 lit. f EU-DS-GVO. Our legitimate interest lies in the legally compliant documentation and verifiability of consent, the management of marketing measures based on the consent granted and the optimization of consent rates.
The following data is processed:
- Your consent(s) or the revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your end device
- Time of your visit to the website
The ConsentID (contains the above mentioned data), the Consent status incl. timestamp are stored in the local memory of your browser and at the same time on the used cloud servers. Further processing will only take place if you submit a request for information or give or withdraw your consent. In this case, the relevant information will be provided to Warema Renkhoff SE in a compact data format in an easily readable text form for the purpose of data exchange (JSON file).
No user information will be stored for statistics on the use of the consent granted or not granted. Only the frequency and locations of clicks are stored, for example to analyze how many visitors give or do not give their consent for certain tools. The personal data is stored on a Google cloud server based in the EU (Brussels, Frankfurt am Main).
The data is deleted as soon as it is no longer needed. The associated cookie has a term of 60 days. The revocation document of a previously granted consent is kept for a period of three years. The storage is based on our accountability in accordance with Art. 5 para. 2 GDPR. This obliges us to comply with the processing of personal data in accordance with the EU Data Protection Basic Regulation. On the other hand, storage is subject to the regular limitation period of three years according to § 195 BGB.
We have also signed a contract for contract processing with Borlabs. This is a contract that is necessary and prescribed by data protection law and ensures that Borlabs processes the personal data of our website visitors only in accordance with our instructions and in compliance with the EU-DS-GVO.
Google Tag Manager
Our website uses the Google Tag Manager. With the Google Tag Manager, website tags can be managed through an interface. The Google Tag Manager tool itself is a cookie-free domain. This means that no cookies are used and no personal data is collected. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags to the extent that they are implemented with Google Tag Manager.
This means that the Google Tag Manager does not collect any data, but simply plays other tools that may collect data. We will describe which of these are in the following paragraphs.
On our website, we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on the basis of your consent in accordance with Art. 6 para. 1 lit. a EU-DS-GVO. Google Maps is a web service for the display of interactive (land) maps to visually present geographic information. By using this service, you will be able to see our dealers and it will be easier for you to contact the dealer.
Already when you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit.a GDPR on the basis of Google’s legitimate interest in the insertion of personalized advertising, market research and/or needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact Google to exercise this right.
Google LLC with its registered office in the USA is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
Secure transmission of your data
In order to best protect the data saved in our system against accidental or intentional tampering, loss, destruction or access by authorised persons, we use appropriate technical and organisation security measures. The security levels are continuously monitored in collaboration with security experts and adjusted to meet new security standards.
The data exchange from and to our website is encrypted in both directions. We offer HTTPS as the transmission protocol for our website, while using the current encryption protocols in each instance.
In addition there is also of course the option of using alternative methods of communication (e.g. mail).
Online offers for children
Children and people under the age of 16 are not permitted to transmit personal data or grant consent to us without the approval of their legal guardians (generally the parents). We would like to ask that parents and guardians actively participate in the online activities and interests of their children.
Links to other providers
Our website also contains – clearly visible – links to the websites of other companies. If and when there are links to websites of other providers, we have no influence over their contents. The respective provider or operator of the websites is responsible for their contents. The linked sites were checked for potential legal violations and identifiable legal infringements when the link was established. No illicit content could be identified at the time when the link was established. However constantly reviewing the content of the linked sites is unreasonable without concrete indications of a legal infringement. Links of this kind will be removed immediately when WAREMA is made aware of legal infringements.
Data subject rights / Other questions?
Under the legal preconditions, you have the right of free-of-charge access to your data, as well as a right to rectification, restriction of processing and erasure of your data, as long as there are no statutory retention periods to oppose them. In addition you can object to data processing, assert your right to data portability or lodge a complaint against data processing with the responsible supervisory authority for data privacy.
If you have given us consent for data processing, you may of course revoke it with effect for the future without stating any reasons.
If necessary you can also contact our data protection officer, who will be happy to answer your questions: firstname.lastname@example.org