Renecost - schuntermann
This privacy policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences like our social media profiles (collectively referred to as “online offering”). Regarding the terminology used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Renecost - schuntermann
Schuntermann Elektroanlagenbau GmbH
Hans-Sachs-Strasse 17
40721 Hilden – Germany
Managing Director: Dr. jur. Manfred Zehetmair
Link to Legal Notice: https://renecost.de/en/legal-notice/
Contact Data Protection Officer: [email protected]
Types of Data Processed
Renecost - schuntermann
Visitors and users of the online offering (hereinafter collectively referred to as “users”).
Renecost - schuntermann
Personal Data: Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, by reference to identifiers like a name, ID number, location data, online identifier (e.g., cookie), or other factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.
Pseudonymization: Processing personal data in such a way that it can no longer be attributed to a specific data subject without additional information, provided that such information is kept separately and subject to technical and organizational measures.
Profiling: Any automated processing of personal data to evaluate certain personal aspects relating to a natural person, especially to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Controller: The natural or legal person, authority, institution, or other body that determines the purposes and means of processing personal data, alone or jointly with others.
Processor: A natural or legal person, authority, institution, or other body that processes personal data on behalf of the controller.
Renecost - schuntermann
In accordance with Article 13 GDPR, we inform you of the legal bases of our data processing activities. Where the legal basis is not specified in this privacy policy, the following applies: the legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; the legal basis for processing for the performance of our services, the execution of contractual measures and the response to enquiries is Art. 6(1)(b) GDPR; the legal basis for processing for compliance with our legal obligations is Art. 6(1)(c) GDPR; and the legal basis for processing for the purposes of safeguarding our legitimate interests is Art. 6(1)(f) GDPR.
If the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6(1)(d) GDPR serves as the legal basis.
In accordance with Art. 32 GDPR, and taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access, input, transfer, availability safeguards and separation of the data within systems. Furthermore, we have implemented procedures to ensure the exercise of data subjects’ rights, the deletion of data and responses to threats to data security.
We also take the protection of personal data into account when developing or selecting hardware, software and procedures, in line with the principle of data protection by design and by default (Art. 25 GDPR).
If, in the course of our processing, we disclose data to other persons or companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g. where the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), where you have given your consent, where a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
Where we commission third parties to process data on the basis of a so-called “data processing agreement”, this is done in accordance with Art. 28 GDPR.
Renecost - schuntermann
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of using third-party services or disclosing/transmitting data to third parties, this is done only if it is necessary for the performance of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests.
Subject to legal or contractual permissions, we process data in a third country or have it processed there only if the special conditions of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special safeguards such as an officially recognised level of data protection corresponding to that of the EU (e.g. for the USA under the “Privacy Shield”) or in compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
Renecost - schuntermann
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to this data as well as further information and a copy of the data, in accordance with Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
Pursuant to Art. 17 GDPR, you have the right to request the erasure of personal data concerning you without undue delay, or, alternatively, to request the restriction of processing of the data in accordance with Art. 18 GDPR.
You have the right, under Art. 20 GDPR, to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to request the transmission of those data to another controller.
Furthermore, in accordance with Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Renecost - schuntermann
You have the right to withdraw consent you have given at any time with effect for the future, in accordance with Art. 7(3) GDPR.
Renecost - schuntermann
You have the right to object at any time to the future processing of personal data concerning you, in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.
Renecost - schuntermann
“Cookies” are small files that are stored on users’ devices. Various pieces of information can be stored within cookies. A cookie primarily serves to store information relating to a user (or the device on which the cookie is stored) during or even after their visit to an online offering.
Temporary cookies, also known as “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves the online offering and closes their browser. For example, the contents of a shopping cart in an online shop or a login status can be stored in such a cookie.
“Permanent” or “persistent” cookies are those that remain stored even after the browser is closed. For instance, a login status can be retained when users revisit a site after several days. The interests of users can also be stored in such a cookie and used for reach measurement or marketing purposes.
“Third-party cookies” are cookies that are offered by providers other than the controller operating the online offering (otherwise, where only the controller’s own cookies are used, they are referred to as “first-party cookies”).
We may use both temporary and permanent cookies and inform you about this within the framework of our privacy policy.
If users do not wish cookies to be stored on their device, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. However, excluding cookies may lead to functional limitations of this online offering.
A general objection to the use of cookies employed for online marketing purposes – in particular in the case of tracking – can be declared via many services, for example via the US site:
http://www.aboutads.info/choices/
or the EU site:
http://www.youronlinechoices.com/
Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that in such cases not all functions of this online offering may be fully usable.
Renecost - schuntermann
The data we process are erased or their processing is restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us are deleted as soon as they are no longer required for their intended purpose and there are no statutory retention obligations preventing their erasure. If the data are not deleted because they are required for other, legally permissible purposes, their processing is restricted. This means that the data are blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
According to legal requirements in Germany, data are in particular retained for 10 years pursuant to §§ 147(1) AO, 257(1) nos. 1 and 4, (4) HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and for 6 years pursuant to § 257(1) nos. 2 and 3, (4) HGB (commercial letters).
According to legal requirements in Austria, data are in particular retained for 7 years pursuant to § 132(1) BAO (accounting documents, vouchers/invoices, accounts, supporting documents, business papers, statements of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents relating to electronically supplied services, telecommunications, radio and television services provided to non-entrepreneurs in EU Member States for which the Mini-One-Stop-Shop (MOSS) is used.
Renecost - schuntermann
We process the data of our contractual partners and prospects, as well as other clients, customers or principals (collectively referred to as “contractual partners”) in accordance with Art. 6(1)(b) GDPR, in order to provide our contractual or pre-contractual services to them. The type of data processed, their scope, purpose and the necessity of processing are determined by the respective contractual relationship.
The data processed include the master data of our contractual partners (e.g. names and addresses), contact data (e.g. email addresses and telephone numbers), contract data (e.g. services used, contract content, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history).
As a rule, we do not process special categories of personal data, unless these are part of a commissioned or contractually required processing.
We process data that are necessary for the establishment and performance of contractual services and point out the necessity of providing such data where this is not evident to the contractual partners. Data are disclosed to external persons or companies only if this is required within the framework of a contract. When processing data that have been provided to us in the course of an assignment, we act in accordance with the instructions of the client and the legal requirements.
When our online services are used, we may store the IP address and the time of the respective user action. This storage is based on our legitimate interests as well as those of the users in protection against misuse and unauthorised use. As a rule, these data are not passed on to third parties, unless this is necessary for the enforcement of our claims pursuant to Art. 6(1)(f) GDPR or there is a legal obligation to do so under Art. 6(1)(c) GDPR.
Data are deleted when they are no longer required for the fulfilment of contractual or statutory duties of care, or for dealing with any warranty or comparable obligations; the necessity of retaining the data is reviewed every three years. In all other respects, the statutory retention obligations apply.
Renecost - schuntermann
We process data in the context of administrative tasks and the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases for processing are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. The data subjects are customers, prospects, business partners and website visitors.
The purpose of and our legitimate interest in this processing lie in administration, financial accounting, office organisation and data archiving – i.e. tasks that serve to maintain our business operations, fulfil our duties and provide our services. Deletion of data with regard to contractual services and contractual communication follows the rules described for those processing activities.
In this context, we disclose or transmit data to tax authorities, advisors such as tax consultants or auditors, as well as other fee-collecting bodies and payment service providers.
Furthermore, on the basis of our legitimate business interests, we store information on suppliers, event organisers and other business partners, e.g. for the purpose of contacting them at a later date. These data, which predominantly relate to companies, are generally stored on a permanent basis.
Renecost - schuntermann
When you contact us (e.g. via contact form, email, telephone or social media), the information you provide is processed for the purpose of handling and responding to your enquiry in accordance with Art. 6(1)(b) GDPR. The users’ details may be stored in a customer relationship management system (“CRM system”) or a comparable system for managing enquiries.
We delete enquiries when they are no longer required. We review the necessity of retention every two years; statutory archiving obligations also apply.
Renecost - schuntermann
We use hosting services to provide the following functionalities: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services which we use for the purpose of operating this online offering.
In this context, we and/or our hosting provider process inventory data, contact data, content data, contract data, usage data as well as meta and communication data of customers, prospects and visitors of this online offering on the basis of our legitimate interest in the efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
We delete enquiries when they are no longer required. We review the necessity of retention every two years; statutory archiving obligations also apply.
Renecost - schuntermann
We, or our hosting provider, collect data on every access to the server on which this service is hosted (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR. The access data include the name of the retrieved website, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to clarify cases of misuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
In this context, we and/or our hosting provider process inventory data, contact data, content data, contract data, usage data as well as meta and communication data of customers, prospects and visitors of this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
We delete enquiries/data when they are no longer required. We review the necessity of retention every two years; statutory archiving obligations also apply.
Renecost - schuntermann
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and efficient operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about users’ use of our online offering is generally transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield framework and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering and to provide us with other services relating to the use of this online offering and the Internet. Pseudonymous user profiles may be created from the processed data.
We use Google Analytics only with IP anonymisation enabled. This means that the user’s IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser will not be merged with other data held by Google. Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. They can also prevent the collection of the data generated by the cookie and related to their use of the online offering, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de
The IP address transmitted by the user’s browser will not be merged with other data held by Google. Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. They can also prevent the collection of the data generated by the cookie and related to their use of the online offering, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.
The personal data of users are deleted or anonymised after 14 months.
Renecost - schuntermann
Within our online offering, and on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and efficient operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use content and service offerings from third-party providers – such as videos or fonts – in order to integrate their content and services (hereinafter collectively referred to as “content”).
This always requires that the providers of such content can see users’ IP addresses, since they would not be able to send the content to the users’ browsers without the IP address. The IP address is therefore necessary for displaying this content. We endeavour to use only those contents whose respective providers use the IP address solely for the delivery of the content.
Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the users’ devices and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and further details about the use of our online offering, and can also be combined with such information from other sources.
Renecost - schuntermann
We use fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/
Opt-out: https://adssettings.google.com/authenticated
Renecost - schuntermann
We integrate maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may in particular include users’ IP addresses and location data, which, however, are not collected without their consent (usually via the settings of their mobile devices). The data may be processed in the USA.
Privacy policy: https://www.google.com/policies/privacy/
Opt-out: https://adssettings.google.com/authenticated