Data Privacy Statement
In the following information we should like to give you as a "data subject" a summary of how we process your personal data and of your rights under the laws on data protection. In principle it is possible to use our Internet sites without entering any personal data. However, if you wish to make use of particular services via our Internet site, it may be necessary to process personal data. If it is necessary to process personal data and if there is no legal basis for such processing we generally obtain your consent.
We always process personal data, for example, your name, your address or e-mail address, in accordance with the General Data Protection Regulation (GDPR) and in conformity with the currently valid Ravensberger Schmierstoffvertrieb GmbH Data Privacy Statements for each specific country. By means of this data privacy statement we should like to inform you of the scope and purpose, for which we collect, use and process personal data.
As the controller of the processing we have implemented a large number of technical and organisational measures to ensure that personal data processed through this Internet site are given the most comprehensive protection possible. Nevertheless, data transfers over the Internet can have fundamental security vulnerabilities, so that we cannot guarantee absolute protection. For this reason you are free to transfer personal data to us through alternative channels, such as by telephone or by post.
The controller within the meaning of the GDPR is:
Ravensberger Schmierstoffvertrieb GmbH
Jöllenbecker Str. 2, 33824 Werther, Germany
Telephone: 05203 9719 - 0
Fax: 5203 9719 - 40
Manager of the responsible body: Mr Paul Becher
3. Data Protection Officer
The Data Protection Officer can be contacted as follows:
Jannik Wallbaum (Assistant DPO)
Telephone: 05221 85496-90
Fax: 05221 8549699
If you have any questions and suggestions, you may contact our Data Protection Officer directly at any time.
The data privacy statement is based on terminology, which has been used by the European legislators and regulators in promulgating the General Data Protection Regulation (GDPR). Our data privacy statement is intended to be easy to read and understand both for the general public and for our customers and business partners. In order to ensure this, we should like to begin by explaining the terminology used.
In this data privacy statement we use inter alia the following terms:
- Personal data
Personal data are all information, which relate to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Data subjects
A data subject is every natural person, who is or can be identified, whose personal data are processed by the controller responsible for the processing (our company).
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
- Third party
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
The consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to you.
5. Legal base for the processing
As a company we process personal data not only on our website, but also in many other processes. In order to give you, the data subject, as much detailed information as possible, we have compiled information on the following processing activities and thus satisfy the legal duties to inform pursuant to Articles 12 - 14 GDPR:
- data protection information on how we deal with contacts and communication partners
- data protection information on how we deal with customers and suppliers.
Should you require any other information, which you have not discovered in the following detailed data privacy statement, please contact in confidence our data protection officer.
6. Legal base for the processing
Article 6 (1) point (a) GDPR is the legal base on which our company bases its processing procedures, for which we obtain consent to processing for a specified purpose.
If the processing of personal data is necessary for the performance of a contract, to which you are a party, as is the case for instance in processing procedures, which are necessary for the supply of goods or the performance of another service or consideration, the processing relies on Article 6 (1) point (b) GDPR. The same applies to those processing procedures, which are necessary for the performance of pre-contractual measures, such as when there are enquiries concerning our products or services.
If our company is subject to a legal obligation, which makes the processing of personal data compulsory, such as to comply with tax obligations, the processing is based on Article 6 (1) point (c) GDPR.
In rare cases the processing of personal data could be necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and as a consequence his name, age, health insurance details or other vital information had to be given to a doctor, a hospital or other third party. In this case the processing would rely on Article 6 (1) point (d) GDPR.
Finally, data processing procedures might rely on Article 6 (1) point (f) GDPR. Processing procedures, which are not recorded on any of the preceding legal bases, are based on this legal base, if the processing is necessary for the protection of a legitimate interest of our company, provided that the interests, fundamental rights and freedoms of the data subject do not override the company's interest. We are permitted to perform such processing procedures in particular because they have been specifically mentioned by the European legislators. In this respect they are of the opinion that the existence of a legitimate interest could be inferred if you are a customer of our company (Recital 47 2nd sentence GDPR).
7.1 SSL/TLS encryption
To protect the security of the data processing and to protect the transfer of confidential contents, such as orders, log-in data or contact enquiries, which you send to us as the site operator, this site uses SSL and TLS encryption. An encrypted connection recognises you because the address line of the browser changes from "http://" to "https://" and from the exit symbol in your browser.
If the SSL or TLS encryption is activated, the data, which you transfer to us, cannot be read by third parties.
7.2 Data collection during a visit to the Internet site
If you use our website purely for information purposes, in other words, if you do not register or transfer other information to us, we collect only those data, which your browser transfers to our server (in what are known as server log files). Every time you or an automated system access one of the pages of our Internet site, the site collects a series of general data and information. These general data and information are stored in the server log files. Data collected may include:
- type and version of browser used,
- the operating system used by the system accessing our site,
- the Internet site, from which a system accessing our site originates (known as the referrer),
- the sub-websites, which are directed to our Internet site via a system accessing our site,
- the date and time of access to the Internet site,
- and Internet Protocol address (IP address),
- the Internet service provider of the system accessing our site.
In using these general data and information we make no inferences as to your identity. On the contrary, this information is needed:
- to deliver correctly the contents of our Internet site,
- to optimise the contents of our Internet site and the advertising for these contents,
- to ensure that our IT systems and technology for our Internet site operate correctly on a permanent basis and
- to provide law enforcement agencies with the necessary information to bring a criminal prosecution in the event of a cyber attack.
Therefore, we analyse these data and information, which we have collected, on one hand for statistical purposes and also with the aim of improving data protection and data security within our company, in order ultimately to ensure an optimal level of protection for the personal data processed by us. The data in the server log files are stored separately from all personal data provided by a data subject.
The legal base for the data processing is Article 6 (1) 1st sentence point (f) GDPR. Our legitimate interest proceeds from the purposes for data processing listed above.
8.1 General information on cookies
Information, which is always related to the specific terminal used, is stored by the cookie. However, this does not mean that we obtain direct knowledge of your identity.
In addition, we also use temporary cookies to improve our site and make it more user-friendly; these are stored for a specifically determined period on your terminal. If you visit our site again, in order to make use of our services, the system automatically recognises that you have already visited us and which entries and preferences you have activated, so that you do not have to enter these again.
The data processed by cookies are necessary for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 (1) 1st sentence point (f) GDPR.
Most browsers accept cookies as a standard feature. However, you can configure your browser settings, so that cookies are not stored on your computer or so that a notice always appears before a new cookie is installed. If you deactivate cookies completely, however, that may result in your being unable to use all the functions on our website.
9. Contents of our Internet site
9.1 Contact details/ contact form
When you make contact with us (e.g via the contact form or by e-mail) personal data are collected. Each contact form makes it clear which data are collected by that particular contact form. These data are stored and used solely for the purpose of responding to your request or to make contact with you and for the associated technical administration. The legal base for the processing of the data is our legitimate interest in responding to your request pursuant to Article 6 (1) point (f) GDPR. If your contact results in the conclusion of a contract, the additional legal base for the processing is Article 6 (1) point (b) GDPR. Once the processing of your request has been completed, your data are erased. This is the case if the circumstances give rise to the inference that the issue has been finally clarified and provided that no conflicting legal duties to preserve the records exist.
9.2 Application management / job exchange
We collect and process the personal data of applicants for the purpose of transacting the application process. These data may be processed electronically. This is the case in particular if an applicant has transferred the relevant application documents to us through an electronic channel, for example by e-mail or on a web form located on the website. If we conclude an employment contract with the applicant, we store the data transferred for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents are automatically erased two months from our notification to the applicant that the application has been unsuccessful, provided that erasure does not conflict with other legitimate interests on our part. Another legitimate interest within the same meaning is, for example, the burden of proof in proceedings under the German General Act on Equal Treatment (AGG).
In this respect alone the data are processed on the basis of our legitimate interest pursuant to Article 6 (1) point (f) GDPR.
10. Despatch of newsletter
10.1 Despatch of newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you from our product range regular offers on goods or services similar to those you have purchased. For this purpose we must obtain your separate consent pursuant to § 7 (3) Unfair Competition Act. In this respect alone the data are processed on the basis of our legitimate interest pursuant to Article 6 (1) point (f) GDPR. If at the start you objected to the use of your e-mail address for this purpose, we shall not send you an e-mail. You are entitled at any time to object to the use of your e-mail address for the afore-mentioned advertising purpose by sending a notification to the controller specified at the start of this information. In so doing you incur only the transmission costs at the basic rates. On receipt of your objection the use of your e-mail address for advertising purposes will cease without undue delay.
10.2 Advertising newsletter
Our Internet site allows you the opportunity to subscribe to our company newsletter. The input screen used for this purpose shows which personal data are transferred to us when your subscribe to the newsletter.
We inform our customers and business partners about our offers at regular intervals by way of a newsletter. As a matter of principle you may receive our company newsletter only if
- you have a valid e-mail address and
- you have registered for the despatch of the newsletter.
For legal reasons in a double opt-on process a confirmation e-mail is sent to the e-mail address you entered in the first instance to subscribe to the newsletter. This confirmation e-mail is used to check whether you as the owner of that e-mail address have authorised the receipt of the newsletter.
When you register for the newsletter we also store the IP address assigned by your Internet service provider (ISP) from the IT system used by you at the time of the registration, together with the date and time of registration. It is necessary to collect these data in order to be able to identify any possible abuse of your e-mail address at a later date and thus to give us legal protection.
The personal data collected when you register for the newsletter are used solely for despatching our newsletter. In addition subscribers to the newsletter may receive notifications by e-mail, provided that this is necessary for the operation of the newsletter service or a registration connected with it, as may be the case when there are changes to the newsletter or modifications to the technical aspects. Personal data collected for the purposes of the newsletter service are not transferred to third parties. You may cancel your subscription to our newsletter at any time. The consent to the storage of your personal data, which you granted for the despatch of the newsletter can be withdrawn at any time. There is a link in every newsletter to enable you to withdraw your consent. In addition, you can also unsubscribe at any time directly on our website or notify us in another way.
The legal base for the data processing for the purpose of despatching the newsletter is Article 6 (1) point (a) GDPR.
11. Social Media
11.1 YouTube plug-in
We have integrated YouTube components into our Internet site. YouTube is an Internet video portal, which enables video publishers to install video clips free of charge and allows other users to watch, analyse and comment on these, also free of charge. YouTube authorises the publication of all kinds of videos, which is why both complete films and television broadcasts and also musical videos, trailers and videos produced by users themselves can be accessed through the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary company of Google LLC., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Every time one of the individual pages of this Internet site, which is operated by us and on which a YouTube component (YouTube plug-in) has been integrated, is accessed, the Internet browser on your IT system is automatically enabled by the respective YouTube component to download a display of the appropriate YouTube component from YouTube. Further information on YouTube can be accessed on https://www.youtube.com/yt/about/de/. As part of this technical process YouTube and Google are informed of which actual sub-page of our Internet site you visited.
If you are logged into YouTube at the same time, YouTube is informed by the access to a sub-page, which contains a YouTube plug-in, which actual sub-page of our Internet site you are visiting. This information is collected by YouTube and Google and is assigned to your YouTube account.
YouTube and Google receive information that you have visited our Internet site, if at the time of your visit to our Internet site you are simultaneously logged on to YouTube. This occurs irrespective of whether you have clicked on a YouTube video or not. If you do not want this kind of information about you to be transmitted to YouTube and Google, you can prevent the information being transferred by logging out of your YouTube account before accessing our Internet site.
We use YouTube in the interests of convenient, easy use of our Internet site. This represents a legitimate interest within the meaning of Article 6 (1) point (f) GDPR.
The YouTube data privacy statement published by YouTube, which can be accessed on https://www.google.de/intl/de/policies/privacy/, gives information on the collection, processing and use of personal data by YouTube and Google.
11.2 Facebook plug-ins (Like & Share button)
We have integrated plug-ins of the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on this website. You will be able to recognise Facebook plug-ins by the Facebook logo or the „Like“ button on this website. An overview of the Facebook plug-ins is available under the following link: https://developers.facebook.com/docs/plugins/.
Whenever you visit this website and its pages, the plug-in will establish a direct connection between your browser and the Facebook server. As a result, Facebook will receive the information that you have visited this website with your plug-in. However, if you click the Facebook „Like“ button while you are logged into your Facebook account, you can link the content of this website and its pages with your Facebook profile. As a result, Facebook will be able to allocate the visit to this website and its pages to your Facebook user account. We have to point out, that we as the provider of the website do not have any knowledge of the transferred data and its use by Facebook. For more detailed information, please consult the Data Privacy Declaration of Facebook at: https://www.facebook.com/privacy/explanation.
If you do not want Facebook to be able to allocate your visit to this website and its pages to your Facebook user account, please log out of your Facebook account while you are on this website.
The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.
12. Web analysis
12.1 Facebook pixels (Custom Audience)
This web site uses Facebook pixels from Facebook LLC., 1 Hacker Way, Menlo Park, CA 94025, USA (Facebook). When express consent has been granted this may allow the behaviour of users to be traced, because they have viewed or clicked on a Facebook advertisement. This process is used to analyse the effectiveness of the Facebook advertisements for statistical and market research purposes and can contribute to improving advertising measures in the future.
The data collected are anonymous for us and thus no inference can be made as to the identity of the user. However, the data are stored and processed by Facebook, so that a connection with the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook guidelines on data use (https://www.facebook.com/about/privacy/). You can enable the placing of advertisements by Facebook and its partners on Facebook and outside it. In addition, cookies can be stored on your computer for these purposes. These processing procedures are authorised solely if you have given your express consent pursuant to Article 6 (1) point (a) GDPR.
Users under 13 years of age may not consent to the use of Facebook pixels. If you are under 13 years of age we request that your obtain the consent of your legal guardian.
Facebook LLC. is domiciled in the USA and is certified for the Privacy Shield US-European Data Protection Convention, which guarantees compliance with the level of data protection in force in the EU.
12.2 Google Analytics
On our websites we use Google Analytics, a web analysis service from Google LLC (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: Google). In this regard pseudonymised user profiles are generated and cookies are used (see Point 4.). The information generated by the cookie about your use of this website, such as
- browser type and version,
- operating system used,
- referrer URL (the site previously visited),
- host name of the computer accessing the site (IP address),
- time of the server query,
are transferred to a Google server in the USA and stored there. The information is used to analyse the use of this website, to compile reports on website activities and to perform other services related to the use of the website and the use of the Internet for the purposes of market research and to design these Internet sites to make them fit for purpose. In addition, Google shall forward this information to third parties, insofar as this is required by law or insofar as third parties process these data on behalf of Google. On no account is your IP address merged with other data from Google. The IP addresses are anonymised, so that assignment is not possible (IP masking).
You can prevent your computer storing cookies by adjusting the settings of your browser software; however, we should like to make you aware that in this case you may not be able to use all the functions of this website to their full extent.
By means of our opt-in cookie banner you have given your consent to this within the meaning of Article 6 (1) point (a) GDPR.
Moreover, you can prevent the collection of the data generated by the cookie and by your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available from the following link: http://tools.google.com/ dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, in particular in the case of browsers on mobile terminals, you can prevent the collection of data by Google Analytics by clicking on the following link Deactivate Google Analytics. An opt-out cookie is installed, which prevents the future recording of your data when you visit this website. The opt-out cookie applies only in this browser and only to our website and is installed on your appliance. If you erase the cookies in this browser, you will have to re-install the opt-out cookie.
Further information on data protection in relation to Google Analytics is available in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
13. Your rights as a data subject
13.1 Right to confirmation
You have the right to obtain confirmation of personal data concerning you which are being processed.
13.2 Right to access Article 15 GDPR
You have the right at any time to obtain from us free of charge access to the personal data stored relating to your identity and to obtain a copy of these data.
13.3 Right to rectification Article 16 GDPR
You have the right to obtain the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed.
13.4 Erasure Article 17 GDPR
You have the right to request us to erase the personal data concerning you without undue delay, provided that one of the grounds provided in the regulation applies and insofar as the processing is not necessary.
13.5 Restriction of processing Article 18 GDPR
You have right to request us to restrict the processing of the data, if one of the legal conditions is present.
13.6 Data portability Article 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, provided that processing is based on consent pursuant to Article 6 (1) point (a) or Article 9 (2) point (a) or on a contract pursuant to Article 6 (1) point (b) and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, you have the right pursuant to Article 20 (1) GDPR to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
13.7 Right to object Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on Article 6 (1) point (e) (data processing in the public interest) or Article 6 (1) point (f) (processing on the basis of the balancing of interests) GDPR.
This applies also to profiling based on these provisions within the meaning of Article 4 (4) GDPR.
If you object, we shall no longer process your personal data, unless we can prove compelling legitimate grounds for the processing, which override your interests, rights and freedoms or the processing serves the purpose of the assertion, exercise or defence of legal claims.
In individual cases we process your personal data, in order to carry out direct advertising. You may at any time object to the processing of the personal data for the purpose of advertising of this kind. This applies also to profiling, if it is connected with such direct advertising. If you object to processing for the purposes of direct advertising, we shall no longer process your personal data for those purposes.
In addition, you have the right on grounds arising from your particular situation to object to the processing of data concerning you, which is processed by us for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
In relation to the use of information society services and irrespective of Directive 2002/58/EC you are free to exercise your right to object by means of an automated procedure, in which technical specifications are applied.
13.8 Withdrawal of consent under data protection law
You have the right at any time to withdraw your consent to the processing of personal data with effect for the future.
13.9 Lodging a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority responsible for data protection concerning our processing of personal data.
14. Routine storage, erasure and blocking of personal data
We process and store your personal data only for the period, which is necessary for achieving the purpose of storage or insofar as this has been provided by the legal provisions, to which this company is subject.
If the purpose of storage ceases to apply or if a required storage deadline expires, the personal data stored are blocked or erased as a matter of routine and in accordance with the legal provisions.
15. Topicality and amendment of the Data Privacy Statement
This data privacy statement is currently valid with the status May 2018.
The further development of our Internet sites or the amendment of legal or governmental provisions may make it necessary to amend this data privacy statement.