Privacy policy – Rössle AG

I. NAME AND ADDRESS OF THE RESPONSIBLE BODY

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is

Rössle AG
Pater-Hartmann Straße 23
87616 Marktoberdorf

Phone: +49 (0) 8342 / 70 59 5 -0
E-mail: info@roessle.ag

Homepage: www.roessle.ag

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

II. DATA PROTECTION OFFICER

A legally prescribed data protection officer for our companies is not mandatory.

III. GENERAL NOTES AND MANDATORY INFORMATION

We are pleased that you are visiting our website www.roessle.ag and thank you for your interest in our company. Dealing with our customers and interested parties is a matter of trust. The trust placed in us is very important to us and we are therefore committed to handling your data carefully and protecting it from misuse, and we take the protection of your personal data and its confidential treatment very seriously so that you feel safe and comfortable when visiting our website. We therefore act in accordance with the applicable legislation on the protection of personal data and data security, and this data protection information in this privacy policy is intended to inform you about when we store which data and how we use it, naturally in compliance with the applicable German legislation. Our data protection takes into account the European level of data protection (GDPR) and is based in particular on the current Federal Data Protection Act (BDSG new).

IV. INFORMATION ON THE COLLECTION OF PERSONAL DATA

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions.

(3) We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations. You can find more detailed explanations on this in section VIII of this privacy policy.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

V. YOUR RIGHTS ( DATA SUBJECT RIGHTS )

(1) You have the following rights vis-à-vis us with regard to your personal data:

Right pursuant to Art. 7 para. 3 GDPR. to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. The legality of the data processing carried out up to the point of revocation remains unaffected by your revocation.
Right to information in accordance with Art. 15 GDPR about your personal data processed by us. You can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been and will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
Right to rectification pursuant to Art. 16 GDPR. Accordingly, you can demand the immediate correction of incorrect or the completion of your personal data stored by us;
Right to erasure pursuant to Art. 17 GDPR. Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR. Accordingly, you may request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
Right to object to processing pursuant to Art. 21 GDPR;
Right to data portability pursuant to Art. 20 GDPR. You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

(2) In accordance with Art. 77 GDPR, you also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The competent supervisory authority is the state data protection officer of the federal state in which our company is based. You can find the details of the Bavarian State Data Protection Officer here: https://www.datenschutz-bayern.de/.

(3) The assertion of all rights mentioned in V. (1) and (2) is generally free of charge for you.

However, in the case of manifestly unfounded or – especially in the case of frequent repetition – excessive requests, we may, in accordance with Art. 12 para. 5 GDPR, either demand a reasonable fee, taking into account the administrative costs of providing information or notification or implementing the requested measure, or refuse to act on the request.

VI. COLLECTION AND STORAGE OF PERSONAL DATA WHEN VISITING OUR WEBSITE AND THE NATURE AND PURPOSE OF ITS USE

(1) In principle, you can visit our website without telling us who you are. Our web servers automatically store information of a general nature. When you visit our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file.

If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. The following information is collected without any action on your part and stored until it is automatically deleted:

– IP address of the requesting computer
– date and time of the request
– name and URL of the requested file
– website from which the request originates (referrer URL)
– browser used
– operating system, if applicable, name of your access provider
– language and version of the browser software.

We process the aforementioned data for the following purposes

– Ensuring a smooth connection to the website
– Ensuring a comfortable use of our website
– Evaluation of system security and stability as well as
– For further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

(2) Our website and web pages sometimes use so-called cookies. Cookies do not damage your computer and do not contain viruses. You will find more detailed explanations on this in section VII. of this privacy policy below

VII. USE OF COOKIES

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

VIII. STORAGE PERIOD AND DATA DELETION

We adhere to the principles of data avoidance and data economy. In particular, your personal data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed. The data will then be erased unless storage is necessary for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject. Such a legal obligation is represented by the statutory retention obligations, which are, for example, 10 years (for accounting data and payroll accounting) or 6 years (for commercial correspondence). The data is blocked for the duration of the retention obligations, after which it is deleted.

IX. CONTACT AND COMMUNICATION

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

On our website, you can also enter personal data in the input fields provided for the purpose of corresponding with us.

This data will only be processed for this correspondence with you and for the purpose for which you have provided us with the data in the context of this communication, e.g. to process your inquiries or to contact you at your request. In this case, the processing of personal data takes place with your consent and is then permitted in accordance with Art. 6 para. 1 lit. a GDPR. We will not pass on this data without your consent. We delete your data in this regard when the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to continue storing it for legal reasons. You can revoke your consent at any time. All you need to do is send us an informal email to info@roessle.ag. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.

X. OTHER PROCESSING BASED ON A LEGITIMATE INTEREST

If necessary, we process your data beyond the actual fulfillment of a contract concluded with you or a consent given by you to protect the legitimate interests of us or third parties, unless a consideration in individual cases shows that your legitimate fundamental rights and freedoms, which require the protection of personal data, prevail (see Art. 6 para. 1 lit. f GDPR). This may include

Advertising, unless you have objected to the use of your data;
Assertion of legal claims and defense in legal disputes;
Ensuring IT security and IT operations;
Prevention and investigation of criminal offenses;
Measures for business management and further development of services and products.

XI. CONSENT

(1) If you have given us your consent to process personal data for specific, additional purposes (e.g. receiving the newsletter), this data processing is based on this consent. We provide details on the content of the consent when consent is requested.

(2) Consent is always voluntary. If the processing of personal data is based on your consent, you have the right to withdraw this consent at any time. The legal basis for data processing based on consent is Article 6(1)(a) GDPR.

(3) Any further processing of your personal data will only take place if you have given us your consent and we are therefore authorized to process your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In some areas of our website, you have the option of giving such express consent. In each case, we will inform you of the purpose for which the data will be processed in the event of your consent and how long we will store this personal data.
XII. OBJECTION OR REVOCATION AGAINST THE PROCESSING OF YOUR DATA

(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

(4) If you wish to exercise your right of revocation or objection, simply send an e-mail to info@roessle.ag.

XII. OBJECTION OR REVOCATION AGAINST THE PROCESSING OF YOUR DATA

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

(4) If you wish to exercise your right of revocation or objection, simply send an e-mail to info@roessle.ag.

XIII. WEB ANALYTICS

Use of Google Analytics / IP anonymization / browser plugin / demographic features in Google Analytics / commissioned data processing with Google

This website uses Google Analytics, a web analysis service of Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser (objection to data collection).
We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
This website uses the demographic features of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from Google’s interest-based advertising and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in section XIII (4) above (objection to data collection).
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

XIV. SOCIAL MEDIA PLUG-INS

We use social media plug-ins from Facebook, Instagram and Pinterest on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR in order to publicize our company. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website in the best possible way. Our buttons in this regard function as an external link, so that no information is transmitted to one of these providers without clicking on one of the buttons. If you do not want the social networks mentioned to collect data about the use of our websites, please do not click on the buttons mentioned. You can recognize the providers of the plugins by the marking on the box above their initial letter or logo.

When the user clicks on one of the buttons, they are redirected to the website of the respective provider. The URL of the current page is transferred as a parameter. We have no influence on whether or how the providers use this date for evaluation purposes.

In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (for US providers in the USA). As the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.

(1) Facebook
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, e.g. confirm the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in the

Data protection information at ( https://www.facebook.com/about/privacy/) from Facebook.

(2) Instagram
Functions and content of the Instagram service, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated into our online offering. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, subscribe to the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to the users’ profiles there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.

(3) Pinterest
On our website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). When you visit a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

XV. PLUGINS AND TOOLS

(1) Embedded YouTube videos
Our website uses plugins from the Google-operated site YouTube. The operator of the corresponding plugins for displaying these videos is

YouTube, LLC
901 Cherry Ave.
San Bruno
CA 94066
USA

When you visit the website with the YouTube plugin, a connection to the YouTube servers is established. YouTube is informed which website you are visiting. If you are logged into your YouTube account (Google account), YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account (Google account) beforehand.

When a YouTube video is started, Google uses cookies that collect information about user behavior. If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent cookies from being saved, you can set this in your browser.

The use of YouTube is in the interest of an appealing presentation of our offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

(2) Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

(3) Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

XVI. DATA SECURITY - SSL/TLS ENCRYPTION

We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. Our servers are protected by firewalls and virus protection.

We also use SSL or TLS encryption (SSL = Secure Sockets Layer; TLS = Transport Layer Security; SSL is the previous name for TLS) when you visit our website. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from “http://” to “https://” and also by the lock symbol in your browser line. If SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties.

XVII. WHEN REGISTERING FOR OUR NEWSLETTER

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by sending an e-mail to info@roessle.ag or by sending a message to the contact details given in the imprint. You can also unsubscribe from the newsletter at any time by clicking on the “Unsubscribe” link.
Your data will only be forwarded to third parties if this is permitted by law or if you have consented to the forwarding. This is the case, for example, if the forwarding of the data serves to fulfill contractual obligations to the user and the postal address is passed on to a shipping company after a store order. Or if the data is requested by competent authorities such as law enforcement agencies.

Your personal data will not be sold or forwarded to third parties for advertising purposes or for the purpose of creating user profiles.

XVIII. YOUTH PROTECTION

Children and young people with limited legal capacity may not transmit any personal data to our websites without the consent of their parents or guardians. Under no circumstances will Rössle AG knowingly collect personal data obtained from children or young people with limited legal capacity or use it in any way or disclose it to third parties without authorization.
XIX. LINKS TO OTHER WEBSITES

Our website contains links to websites operated by third parties. This privacy policy does not apply to the collection, processing and use of personal data by such third parties. Please note that we cannot assume any responsibility for the content of third-party websites or for their compliance with data protection requirements. We therefore recommend that you check the data protection provisions of these websites.

XIX. LINKS TO OTHER WEBSITES

XX. UPDATE OF THIS PRIVACY POLICY

From time to time it may be necessary to update this data protection notice, for example due to new legal or official requirements or new offers on our website. We will then inform you here. In general, we recommend that you visit this data protection notice regularly to check whether there have been any changes. You can tell whether changes have been made by the fact that the status indicated at the bottom of this document has been updated.

XXI. PRINTING AND SAVING THIS DATA PROTECTION NOTICE

You can print out and save this data protection notice directly, for example by using the print or save function in your browser.

Status: September 2021