Data protection information according to Art. 13 DSGVO
for the website of the RKW Group (www.rkw-group.com)

1. Person in charge

The data protection controller within the meaning of Art. 4 No. 7 DSGVO is the :

RKW SE
Headquarters
Havellandstraße 8
68309 Mannheim

2. Contact details of the data protection officer

RKW SE
Datenschutz
Havellandstraße 8
68309 Mannheim
data.protection@rkw-group.com

3. Data categories and processing purposes

3.1. Call and informational use of the website
Each time you access this website, your browser automatically sends the following data to our website server: Date and time of your access to the website; website/application from which the access was made (referrer URL); your browser type with version; the sub-websites you are visiting.

For data protection reasons your IP address is anonymized.

The processing of the aforementioned data is carried out in order to optimize our website, to ensure the permanent functionality, security and stability of our website and connected IT systems, and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

The above data will be deleted as soon as the use of the service (use of the website) ends.

3.2. Use of our contact form
You can contact us via our contact form. The following data will be requested from you in the contact form: company, first name, last name, street (optional), postal code/city (optional), country, e-mail, telephone (optional). In the contact form you have to select your subject area and enter your comments (free text field).

If you use our contact form, your above-mentioned data will be processed by us for the purpose of processing your request or answering your inquiry.

The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal retention periods remain unaffected.

3.3. Registration for our Media Center (Media Library)

If you work in the field of public relations, you can register on our website to get full access to our Media Center (media library). As part of the registration process, the following data will be requested from you: user name, first name, last name, name of the medium, position/function, e-mail address, password.

These data are processed for the purpose of public relations.

You can trigger the deletion of the above data at any time. However, this data will be deleted at the latest after deletion of your Media Center user account.

3.4. Cookies use
We use cookies on our website. Cookies are small text files and contain a characteristic string that enables identification of the browser when the website is called up again.

When you first visit our website, we ask you which cookies you agree to: "Essential" cookies (technically necessary cookies), "Statistics" cookies (cookies for statistical analysis of website usage) and "External Media" cookies (cookies set when external media are integrated). You can also agree to the use of all cookies ("Accept All") or select the specific cookies for which you give your consent in the "Individual Privacy Preferences and options for withdrawl"→"Show Cookie Information" function of the cookie banner that is displayed to you. You can also access these individual privacy settings, including the option to revoke, at any time in the footer of our website under "Change cookie settings".

3.4.1. Technically necessary cookies (Essentials)
We use the following technically necessary cookies on our website:

a. Borlabs Cookie
We use the technically necessary cookie Borlabs from our service provider Borlabs - Benjamin A. Bornschein, which stores and documents the cookie consent you gave when you first visited this website. This data is not shared with the Borlabs cookie provider. The Borlabs Cookie does not process any personal data.

Only technically necessary cookies are set by the Borlabs cookie. If our website is accessed, the following data is transmitted to Borlabs Cookie: Your consent or revocation of your consent to set cookies, a cookie set by Borlabs Cookie in your browser, the cookie runtime and version, domain and path of the WordPress website and the UID. The UID is a randomly generated ID and is not a personally identifiable information.

The collected data will be deleted after one year from the end of the use of the website, unless you request us to delete it earlier or delete the Borlabs cookie yourself. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://borlabs.io/kb/what-information-does-borlabs-cookie-store/

The use of the Borlabs cookie is done in order to obtain and document the necessary consents for the use of cookies.

b. WordPress Login
We use the WordPress login cookie on our website to authenticate website visitors who wish to log in to our website. The WordPress login cookie is a session cookie that processes the authentication data (username/email address and password) of the website visitor and is deleted after the browser is closed. This cookie is created for each session where a website visitor logs in to our website. In particular, this may be website visitors who are engaged in public relations and have full access to our Media Center (Media Library).

You can also visit our website without cookies. If you do not want to use cookies, you can completely disable or restrict them in your browser. However, this may lead to functional restrictions of our website.

The following list provides more information on how to disable or manage your cookie settings in the browser you use:

Google Chrome:
https://support.google.com/chrome/answer/95647?hl

Firefox:
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer:
http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies

Safari:
http://help.apple.com/safari/mac/8.0/#/sfri11471

3.4.2. Use of other Cookies
In addition to the technically necessary cookies, we also use other cookies on our website ("Statistics" and "External Media" cookies) if you have consented to this. In detail, these are the following cookies:

a. Google Analytics (Statistics)
If you consent to the use of Google Analytics, we use Google Analytics, a service provided by Google Ireland Ltd. ("Google"). Google Analytics uses cookies that allow an analysis of the use of the website.

During your visit to the website, the following data is processed, among others: Information on the regional origin and your operating system as well as the end device with which the website is accessed; referring website or network from which you come; target pages; click paths; bounce rates and the time spent on individual sub-pages.

By means of this information, we learn how the website is used and are thus able to constantly improve our offer.

IP anonymization is activated on our website so that your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

The above data will be deleted after two years from the end of the use of the website, unless you request us to delete it earlier or revoke your consent. You can revoke your consent here at any time with effect for the future: Change cookie settings. Mandatory legal retention periods remain unaffected.

In addition, you can prevent the collection of the data generated by the cookies and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

For more information on data processing by Google, please see the following link: https://support.google.com/analytics/answer/6004245?hl=de

b. Social Wall von Juicer (External Media)
If you consent to the use of Social Wall (Juicer), we will integrate a Social Wall from our service provider Jucier.io, Inc. on our website. This service offers the possibility of displaying social media activities relating to the RKW Group bundled in a social feed and integrating this as a Social Wall on our website. It is possible to integrate posts from Instagram, Twitter and numerous other social media channels based on hashtags or, alternatively, to display all posts from an account (Instagram, Twitter, etc.) on the social wall. No personal data of website visitors are processed here. The Social Wall can be accessed by anyone, including people who are not registered on Instagram, Twitter, etc.

You can revoke your consent here at any time with effect for the future: Change cookie settings

For more information about Juicer's data processing, please visit. https://www.juicer.io/privacy

c. Google Maps (External Media)
If you consent to the use of Google Maps on our website, we integrate the online map service of our service provider Google Inc. to enable you to easily find our company geographically and, if necessary, to make it easier to find us.

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you call up our website, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. Therefore, we have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:. Date and time of the visit to our website, Internet address or URL of our website, IP address, (starting) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this.

The collected data will be deleted after one year from the end of the use of the website, unless you request us to delete it earlier or revoke your consent. You can revoke your consent here at any time with effect for the future: Change cookie settings. Mandatory legal retention periods remain unaffected.

You can find more information in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

d. Vimeo

If you consent to the use of Vimeo, we embed videos from our service provider Vimeo LLC on our website.

When you visit a subpage of our website that is equipped with a Vimeo video, a connection to the Vimeo servers is established. In the process, the Vimeo server is informed which of our sub-pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

The above data will be deleted after two years from the end of the use of the website, unless you request us to delete it earlier or revoke your consent. You can revoke your consent here at any time with effect for the future: Change cookie settings. Mandatory legal retention periods remain unaffected.

You can find more information at: https://vimeo.com/privacy.

3.5. Use of Plugins

3.5.1 WPML
On our website we use the language plugin WPML from the provider OnTheGoSystems Limited to offer a German and English language version of the website. WPML saves the language you select on the website so that the same language can be displayed again when you switch pages.

The collected data will be deleted after 2 years from the end of the use of the website.

For more details about the WPML plugin, see: https://wpml.org/documentation/support/browser-cookies-stored-wpml.

3.5.2. iThemes Security

To protect against external attacks by hackers and bots, we use the WordPress plugin iThemes Security from our service provider iThemes Media LLC. This plugin records the IP address of website visitors, the user ID of logged-in website users (website visitors who are engaged in public relations activities and are registered for our Media Center), and the username during login attempts in order to detect malicious activity and protect the website from certain types of attacks. Examples of events recorded during the login process include: Login attempts, logout requests, requests for suspicious URLs, changes to site content, and password updates. This data is deleted within 14 days after the end of the use of the website.

3.5.3. Download Monitor

To manage the downloads we use the WordPress plugin Download Monitor on our site. The plugin is set so that no personal data is processed.

4. Legal Basis

Insofar as we have an overriding legitimate interest in data processing, Art. 6 (1) p. 1 lit. f DSGVO is the legal basis for data processing. Our legitimate interests are:

  • Provision of the website content accessed, optimization of the website and system security and stability, as well as defense against and tracking of cybersecurity attacks
  • Public Relations
  • Provision of a German and an English version of the website
  • Data protection-compliant documentation of consents

Insofar as it is necessary for us to process personal data for the fulfillment of a contract with you or for the implementation of pre-contractual measures, Art. 6 (1) lit. b DSGVO is the legal basis for the data processing.

Insofar as it is necessary for us to process personal data in order to fulfill a legal obligation, Art. 6 (1) lit. c DSGVO is the legal basis for the data processing.

If there is no legal basis, we ask for your consent. Insofar as you give your consent, your consent pursuant to Art. 6 para. 1 lit. a DSGVO is the legal basis for data processing.

Insofar as we use processors, the data processing is based on a contract in accordance with Art. 28 DSGVO.

5. Recipient Categories

We regularly transfer your personal data to the following recipients located in the EU / EEA:

Type of serviceService providerService provider headquarters
Hosting and maintenance of the websiteStrato AG, Pascalstraße 10 10587 BerlinDE
Advertising and marketingSmack Communication GmbH, Kurfürstendamm 194, Im Haus Cumberland, 10707 BerlinDE
Website analysis Google Ireland Limited Gordon House, Barrow Street Dublin 4 Irland IRL

 

We regularly transfer your personal data to the following recipients located in a third country without an adequacy decision pursuant to Art. 45 DSGVO:

Type of serviceService providerService provider headquarters
Online map serviceGoogle Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USAUSA
Video platformVimeo LLC, 555 West 18th Street, New York, New York 10011, USAUSA
Prevention of brute force attacksiThemes Media LLC, 1720 S. Kelly Ave. Edmond, Oklahoma 73013, USA USA
Authentication serviceWordPress Foundation 660 4th Street Nr. 119, San Francisco, California 94107USA

 

We transfer personal data to third countries without an adequacy decision according to Art. 45 DSGVO only to service providers that offer suitable guarantees according to Art. 46 para. 2 DSGVO.

6. Rights of the person concerned

As a data subject, you can exercise the following rights if the legal requirements are met. Please use the contact details provided above under items 1. and 2:

Right to information about processed data according to Art. 15 DSGVO: You have the right to request information about your stored personal data from us at reasonable intervals. This information extends to the question of whether RKW SE has stored personal data of yours and, among other things, what the data is and for what purposes the data is processed. Upon request, RKW SE will provide you with a copy of the data that is the subject of the processing.

Right to rectification of incorrect data according to Art. 16 DSGVO: In addition, you have the right to request RKW SE to correct incorrectly stored data.

Right to deletion according to Art. 17 DSGVO: You have the right to request RKW SE to erase your personal data. We are obligated to delete your personal data, among other things, if it is no longer necessary for the purposes for which it was collected or otherwise processed, if you have revoked consent once given, or if the data was processed unlawfully.

Right to restriction of processing according to Art. 18 DSGVO: Under certain circumstances, you have the right to restrict the processing of your personal data. This includes if you dispute the accuracy of your personal data and we have to verify your objection. In that case, your data may not be further processed by us, with the exception of storage, until the question of accuracy has been clarified.

Right to data portability according to Art. 20 DSGVO: Should you wish to switch to another service provider, you have the right to have us hand over the data you provided to us on the basis of your consent or on the basis of an existing contractual relationship with you in a common, machine-readable format or - at your choice - transfer it to a third party.

Right to revoke your consent according to Art. 7 (3) DSGVO: If you have given us consent to process data, you may revoke this consent at any time by the same means by which you gave it. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right to objection according to Art. 21 (1) DSGVO: You may object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests.

Right to complain to a supervisory authority according to Art. 77 (1) DSGVO: You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the supervisory authority responsible for RKW SE (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Königstraße 10 a, 70173 Stuttgart).