Privacy Policy
A. Privacy policy
Status: January 2023
1. Controller
The controller within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) is Gebr. Reinfurt GmbH & Co. KG ("GRW"), Niederhoferstr. 105, 97222 Rimpar, Germany. For more information about us, please refer to our imprint . You can reach our data protection officer, Mr. Stephan Menzemer, at dsb@gvw.com.
2. General
The following statement gives you an overview of what kind of personal data is collected, for what purpose and on what legal basis. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior. In addition, we inform you about your rights vis-à-vis us as the controller.
3. Data processing on this website
During the mere informative use of this website, we automatically collect and store information in the server log files that your browser transmits to us.
- IP address (anonymized)
- Date and time of the request
- Time zone difference
- Request content
- Access status/http status code
- Web page from which the request comes
- Browser, operating system and its interface
- Browser software version
This data is technically necessary for us to display this website to you and to ensure stability and security. The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session.
The storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.
The legal basis for the collection and temporary storage is Art. 6 para. 1 lit. f GDPR. Our legitimate interest according to Art. 6 para. 1 lit. f GDPR lies in the above-mentioned purposes.
An evaluation of the data for marketing purposes does not take place in this context. We will not assign this data to specific persons and this data will not be merged with other data sources.
This data is stored on servers in Germany. They are deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 10 days at the latest.
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation and delivery of the website. Consequently, there is no possibility to object on the part of the user.
4. Contact
Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the contact form will be transmitted to us and stored. These data are:
- Salutation
- Title
- First name
- Last name
- Company
- Address
- Email address
- Phone number
- Request type
- Your message to us
The following data is also stored at the time the message is sent:
- The anonymized IP address of the user
- Browser and system version of the user
- Date and time of the message
For the processing of the data, your consent is first obtained before sending and reference is made to this privacy policy. The legal basis for the processing in this case is Art. 6 para. 1 lit. a GDPR.
Alternatively, it is possible to contact us via the email address provided. In this case, the personal data of the user transmitted with the email will be stored. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
The processing of personal data from the contact form serves us solely to process the contact request. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
Data subjects have the possibility to revoke their consent to the processing of personal data at any time. If data subjects contact us, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
You can send your objection to the following address: personal@grw.de
All personal data stored in the course of contacting us will be deleted in this case.
5. Application
Our website contains an application form that can be used for electronic applications for advertised positions or for unsolicited applications. If a person uses this option, the data entered in the application form is transmitted to us and stored. These data are:
- Salutation
- First name
- Last name
- Address
- Email address
- Phone number
- Indication of which position the application is for
- Indication of how you became aware of us
- The personal data provided by you in the cover letter
- The personal data provided by you in the resume
- Testimonials
- Your message to us
The following data is also stored at the time the message is sent:
- The anonymized IP address of the user
- Browser and system version of the user
- Date and time of application
For the processing of the data, your consent is first obtained before sending and reference is made to this privacy policy. The legal basis for the processing in this case is Art. 6 para. 1 lit. a GDPR.
For more information about the processing of your personal data in the application process (e.g. any recipients and storage period), please refer to our data protection information for applicants.
6. Cookies
Furthermore, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser used and through which the entity that sets the cookie (in this case GRW) receives certain information. A cookie contains a characteristic string of characters that makes it possible to uniquely identify the browser when you return to the website. Cookies cannot execute programs or transmit viruses to your computer.
6.1 Technically necessary cookies
We use technically necessary cookies to make our website more user-friendly and effective overall and to ensure the security of our website. Some elements of the website require that your browser can be identified even after a page change.
Your usage data collected through technically necessary cookies will not be used to create profiles.
The technically necessary cookies also include the so-called session cookies. We use these for the operation of the website. They store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to the website. The session cookies are deleted when you close your browser.
The legal basis for the use of these technically necessary cookies is sec. 25 para. 2 no. 2 TTDSG in conjunction with Art. 6 para. 1 p. 1 lit. f GDPR.
6.2 Cookies that are not technically necessary
We also use cookies on the website that are not technically necessary. These are, for example, cookies that enable an analysis of the surfing behavior of the users. The use of these cookies is for the purpose of improving the quality of the website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize the offer.
The legal basis for the use of these cookies on our website is your consent pursuant to sec. 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR.
Once you have given your consent regarding the use of cookies, you can revoke it here at any time with effect for the future.
You can also prevent the storage of cookies by selecting the appropriate settings on your browser software. In this case, however, we would like to point out that this website may not be able to be used to its full extent.
Further information on the use of cookies from certain providers that are not technically necessary is provided below.
7. Use of Google Analytics
Google Analytics is a tracking tool of the US company Google LLC, which is used for the analysis of traffic on websites.
Informationen des Drittanbieters:
Google Ireland Limited
Google Building Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland
Data processing purposes
If you have given your consent, we use Google Analytics to regularly analyze your user interactions on websites and apps. The statistics and reports obtained enable us to improve our offer and make it more interesting for you as a user.
Google Analytics is a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity.
A setting of the cookie and a thereby enabled transmission of your data will only take place if you have previously given us your consent in this regard. You can revoke your consent at any time with effect for the future in our cookie banner or by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Data collected
The data we collect using cookies includes the interactions between you as a user of the website and our website, device/browser data, IP addresses, and website or app activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called "IP location determination").
Retention period
The retention period is the period during which the collected data is stored for processing. The data must be deleted as soon as they are no longer needed for the specified processing purposes.
User and event data associated with cookies or unique IDs are stored for 14 months. Aggregated data sets can also be stored for a longer period. However, this aggregated data does not allow any conclusions to be drawn about individual users.
Transfer to third countries
Since Google is a US company, your personal data may be transferred to the USA. The USA is currently considered by the European Commission as a country without an adequate level of data protection.
Since the EU-US Privacy Shield was declared invalid by the European Court of Justice, Google relies on the EU standard contractual clauses as adequate safeguards for the protection of your personal data within the meaning of Art. 46 para. 2 lit. c GDPR when processing your personal data in the US.
There is nevertheless a risk for personal data transferred to the US that it may be processed by US authorities for control and monitoring purposes, possibly without data subjects having any legal recourse against this.
Click here to revoke on all domains of the processing company:
https://tools.google.com/dlpage/gaoptout?hl=en
Click here to read Google's privacy policy:
https://policies.google.com/privacy?hl=en
Questions about data protection can be directed to Google at the following link:
https://support.google.com/policies/contact/general_privacy_form?hl=en
8. Use of Vimeo
We also use videos on our website from the global company Vimeo, a video platform that enables the streaming of high-resolution videos. The video portal is operated by Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA.
With the help of a plug-in, we can show you interesting video material directly on our website. In the process, certain data may be transferred from you to Vimeo. Vimeo offers us the opportunity to present you with high-quality content directly on our website. Instead of just giving you a link to an interesting video, you can watch the video right there on our site. This expands our services and makes it easier for you to access interesting video content in addition to our text and images.
When you visit a web page on our website that has a Vimeo video embedded, and you actively click on an existing video, your browser connects to the Vimeo servers. In the process, data is collected, stored and processed on the Vimeo servers, regardless of whether you have a Vimeo account or not. This data includes
- Your IP address,
- technical info about your browser type,
- Your operating system or very basic device information,
- through which website you use the Vimeo service,
- what actions (web activities) you perform on our website.
These web activities include, for example
- Session Duration,
- Bounce rate,
- which button you clicked on our website with built-in Vimeo function.
These actions may be tracked and stored by Vimeo using cookies and similar technologies. As a registered and logged-in Vimeo member, additional data may be collected and your actions on our website may be directly linked to your Vimeo account. To prevent this, you must log out of Vimeo while "surfing" our website. Storage on Vimeo basically takes place for as long as Vimeo has a commercial reason for storing it. Afterwards, the data is deleted or anonymized.
The legal basis for the use of Vimeo is your consent according to sec. 25 para. 1 TTDSG, Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future. In addition, you always have the option to manage cookies in your browser according to your preferences. You can change the collection and storage of your data and the setting of Vimeo cookies in your browser settings and delete or disable cookies at any time. Please note that various features may not be available to the full extent after disabling/deleting cookies. If you are a registered Vimeo member, you can also manage the cookies used in the settings at Vimeo.
You can learn more about Vimeo's use of cookies at https://vimeo.com/cookie_policy, and you can read information about Vimeo's privacy policy at https://vimeo.com/privacy.
Notice regarding processing of your data collected on this website in the USA by Vimeo:
By consenting to the use of Vimeo, your data will be processed in the USA. The USA is considered by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and for monitoring purposes, possibly also without any legal remedy. If you have not consented to the use of Vimeo, the transfer described above will not take place.
9. GRW on social media
In addition to this website, we are also present on various social media. We are currently represented on Xing, LinkedIn and Instagram. Our profiles can be reached via the links inserted on the website.
On the pages of the respective service providers, your personal data may be processed by them, over which, however, we have no control.
The purpose and scope of data collection as well as the provisions on the use of personal data by the respective platform can be found in the privacy policy of the respective operator.
- Xing: https://privacy.xing.com/en
- Instagram: https://de-de.facebook.com/help/instagram/519522125107875
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
10. Your rights
10.1 Right of access
You may request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing takes place, you can request information from us about the following:
1. the purposes for which the personal data is processed;
2. the categories of personal data which are processed;
3. the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
4. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. any available information on the origin of the data, if the personal data is not collected from the data subject;
8. the existence of automated decision-making, including profiling, pursuant to Article 22 para. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
10.2 Right of rectification
You have the right to obtain rectification and/or completion without delay if the personal data processed concerning you is inaccurate or incomplete.
10.3 Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
1. if you dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data;
2. the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead;
3. we no longer need the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims, or
4. if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether our legitimate grounds override your grounds.
Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
10.4 Right to erasure
You may request that the personal data concerning you be deleted without undue delay, and we are obligated to delete such data without undue delay, if one of the following reasons applies:
1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
4. The personal data concerning you has been processed unlawfully.
5. The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If we have made the personal data concerning you public and we are obligated to erase it pursuant to Article 17 para. 1 GDPR, we shall take reasonable steps, including technical measures, to inform data controllers processing the personal data that you, as the data subject, have requested erasure of all links to or copies or replications of such personal data, taking into account the available technology and the cost of implementation.
The right to erasure does not exist insofar as the processing is necessary to
1. exercise the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
3. for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89 para. 1 GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
5. for the establishment, exercise or defense of legal claims.
10.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obligated to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
10.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
1. the processing is based on consent pursuant to Art. 6 para. 1 a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
2. the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
10.7 Right to revoke consent under data protection law
Where the legal basis for a data processing is your consent, you have the right to revoke this consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
10.8 Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
1. is necessary for entering into or fulfillment of a contract between you and us,
2. is permitted by legislation of the Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
3. is done with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Article 9 para. 1 GDPR, unless Article 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases mentioned in 1. and 3., we take suitable measures to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person on the part of the controller, to express your point of view and to contest the decision.
Automated decision making including profiling according to Art. 22 para. 1 and 4 GDPR does not take place.
10.9 Right to lodge a complaint with supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
You also have the right to complain to the supervisory authority responsible for us:
Bavarian State Office for Data Protection Supervision
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle@lda.bayern.de
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.