Data Protection and Privacy Policy
RÖKONA Textilwerk GmbH & Co. KG
Schaffhausenstraße 101
72072 Tübingen, Germany
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data security regulations and this Data Protection and Privacy Policy. This Data Protection and Privacy Policy explains what data we collect and what we use it for. It also explains how this is done and for what purpose. We draw your attention to the fact that data transmission on the Internet (e.g. when communicating by e-mail) can be subject to security vulnerabilities. Seamless protection of data against access by third parties is not possible.
1. Who is responsible for processing personal data and who can one contact with questions? The party responsible for the processing of personal data as defined by the legal data protection provisions (e.g. GDPR) is:
RÖKONA Textilwerk Verwaltungs-GmbH
Schaffhausenstraße 101
72072 Tübingen, Germany
Represented by: Harald Westphal, Arnd-Gerrit Rösch
P: +49(0)7071 153 0, F: +49(0)7071 153 153, E: info@roekona.de
2. DATA PROTECTION OFFICER
You can reach the data protection officer as follows:
PROLIANCE GmbH, Leopoldstr. 21, 80802 München, Germany
E: datenschutzbeauftragter@datenschutzexperte.de
If you contact the data protection officer, please state the company to which your enquiry relates. Please do not include any sensitive information such as a copy of your identity card with your enquiry.
3. How do we collect your data?
3.1 Internet
Your data are collected when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of your website visit). The collection of these data is conducted automatically as soon as you enter the website. A portion of the data is collected in order to ensure error-free provision of the website. Other data can be used for analysis of your user conduct. Your data is also collected by you sharing it with us. Your personal data are used and stored for the fulfillment of the existing contract with you or the execution of the contractual or pre-contractual measures requested by you (e.g. order preparation, responding to a contact inquiry), as well as for our own advertising purposes.
3.2 REQUESTS BY EMAIL, PHONE OR FAX
If you contact us by e-mail, telephone or fax, your request, including all personal data derived from it (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 Para. 1 lit.f GDPR), as we have a legitimate interest in the effective Processing the request sent to us.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal regulations – in particular statutory retention periods – remain unaffected by this.
4. Data sharing
There is no transfer of your personal data to third parties other than for the purposes listed in the following section. We only share your personal data with third parties if:
– you have expressly granted your permission for such in accordance with Art. 6 Sec. 1 Pg. 1 lit. a of the GDPR,
– on the basis of justified interest in accordance with Art. 6 Sec. 1 lit. f. GDPR in the economical and effective commission of our business operations,
– in the event that there is a legal obligation for such data transfer in accordance with Art. 6 Sec. 1 Pg. 1 lit. c GDPR, and
– such is legally permissible and necessary in accordance with Art. 6 Sec. 1 Pg. 1 lit. b GDPR for the execution of contractual relations with you.
5. Data processing for the purpose of contract initiation and execution (Art. 6 Sec. 1 lit. b GDPR)
Processing of the data is necessary for the initiation, execution and accounting of the contract. The following types of personal data are processed within the framework of the project processing: Name of the customer, address data, telephone number, email address for the provision of contractually agreed performances, dispatching invoices or as needed dunning reminders, execution of payment, communication with the customer, and complaint management. The personal data are processed for the following purposes on the following legal basis:
– Fulfillment (including accounting) of the contract (and execution of pre-contractual measures at your request) on the basis of Art. 6 Sec. 1 lit. b GDPR
– Direct advertising on the basis of Art. 6 Sec. 1 lit. a GDPR, respectively, your consent and on the basis of Art. 6 Sec. 1 lit. f) GDPR and
– Fulfillment of legal obligations (Art. 6 Sec. 1 lit. c) GDPR)
– Adherence to the legal archiving and storage obligations (e.g. § 257 German Federal Civil Code [HGB], § 147 AO) on the basis of Art. 6 Sec. 1 lit. c) GDPR
6. Will the personal data be disclosed to other bodies?
Within our company those bodies receive access to the data which require such for the fulfillment of the purposes cited above. This also applies for service providers and vicarious agents that we use. Personal data is only transferred by us to third parties if such is necessary for the purposes cited above or if you have provided your consent for such in advance.
Recipients of personal data could be e.g.: financial and tax authorities, commercial credit insurance (EulerHermes), collection agencies, insurance companies, banks and credit institutions (payment processing), planning partners, commercial agents, accountants, Internet service providers (e.g. Google) and Internet agencies, attorneys and auditors.
The legal bases for such transfers are Article 6 Section 1 lit. b and Article 6 Section 1 lit. f GDPR. Transfers on the basis of Article 6 Section 1 lit. f GDPR may only be conducted to the extent that such is necessary for safeguarding legitimate interests of siteowner or third parties and which do not outweigh the interests or fundamental rights and fundamental liberties of the person in question that the protection of the personal data requires.
7. Deleting data
Your/the personal data are stored for the purposes cited above. Your data will only be processed from the time of collection to the extent that you or a third party has transferred such to us. Your/the personal data are deleted when the contractual relationship with you/the customer ends, respectively, the joint project ends, all mutual claims are fulfilled and no other legal storage obligations or legal justifications for the storage exist. This specifically refers to the storage obligations from the Federal German Civil Code (HGB) and the German Tax Code (AO). This means that upon expiration of the legal storage obligations, which generally consist of 10 years following the termination of the contract, your personal data will be deleted.
Physical documentation on the projects will be destroyed within the same time periods.
8. Rights of affected persons
You have the right:
– in accordance with Art. 15 GDPR
– to demand information regarding your personal data which we have processed. In particular, you can demand information about the purposes of the processing, the category of the personal data, the categories of the recipients to whom your data has been or will be disclosed, the planned duration of its storage, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data to the extent that such was not collected by us, as well as regarding the existence of automated decision
– making including profiling and/or, as needed, detailed information regarding the details of such;
– in accordance with Art. 16 GDPR to demand the immediate correction of incorrect or incomplete personal information of yours that is stored by us;
– in accordance with Art. 17 GDPR to demand the deletion of personal information of yours that is stored by us to the extent that the processing is not required for the exercise of the right of free expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
– in accordance with Art. 18 GDPR to demand the restriction of processing your personal data to the extent that you dispute the accuracy of the data, the processing is illegal but you waive their deletion and we no longer need the data, but you nevertheless require the data for the assertion, exercise or defense of legal claims or you have objected in accordance with Art. 21 GDPR to the processing;
– in accordance with Art. 20 GDPR to demand receipt of your personal data that you have provided to us in a structured, conventional and machine-readable format, or the transfer of such to another responsible party;
– in accordance with Art. 7 Sec. 3 GDPR to withdraw from us at any time the consent you provided to us previously, with the result that we may no longer continue the data processing in the future that was based on such consent, and
– in accordance with Art. 77 GDPR to appeal to a supervisory authority. In general, for this you can appeal to the supervisory authority of the location where you normally reside or work, or that of our company headquarters.
9. Right of appeal
To the extent that your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Sec. 1 Pg. 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to appeal against the processing of your personal data to the extent that there are grounds for such appeal resulting from your special situation or the appeal is directed against direct advertising. In the latter case, you have a general right of appeal that will be implemented by us without your specification of a special situation related to yourself.
All that is required for you to exercise your right of withdrawal or appeal is an email to datenschutz@roekona.de.
10. TECHNOLOGY
SSL/TLS ENCRYPTION
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login details or contact requests that you send to us as the website operator. You can recognise an encrypted connection by your browser address bar reading „https://“ instead of „http://“ and the lock symbol in the browser bar.
We use this technology to protect your transmitted data.
11. Cookies
On various web pages we use cookies so that you can move within the website and use its functions, or for instance as required for access to password-protected sections. Without these cookies we are unable to provide certain services you have requested (Art. 6 Sec. 1 Pg. 1 lit. b GDPR).
To the extent that you have consented to such, in accordance with Art. 6 Sec. 1 Pg. 1 lit. a GDPR we also use cookies for purposes of tracking, for improving the website’s functionality and service, for creating statistics related to how our website is used and for seeing how effective our advertising campaigns are. In addition, cookies enable us to remember information entered during earlier visits to the website (e.g. user name, language) in order to provide users with services tailored specifically to them. Cookies are also used in order to design our website according to needs; to this end, pseudonymous user profiles are created to enable analysis of your usage of the website. In addition, we can also use cookies with more extensive tracking and targeting functions; such cookies are used above all in order to calibrate advertising in a more targeted fashion to you and according to your interests, and it can also be used to track you to other websites. With targeting cookies, so-called advertising networks for example also recognize how often a user has visited our website and this information can also be forwarded to another advertising company.
Cookies are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive following the end of your browser session. Other cookies remain on your computer and enable us to recognize your computer upon your next visit (so-called permanent cookies). Naturally, you also have the possibility to peruse our website without cookies. Most browsers automatically accept cookies.
You can set your browser settings so that you are informed about the placement of cookies; this makes cookie usage transparent for you.
At any time you can withdraw the consent you have given us or object to the data processing. The simplest way to do this is to prevent the storage of cookies on your hard drive by selecting “Accept no cookies” in your browser settings. In such case it is however possible that you will not be able to use all of our website’s functions to their full extent.
11.1 COOKIE CONSENT WITH BORLABS COOKIE
Our website uses the cookie consent technology from Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document them in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter Borlabs). When you enter our website, a Borlabs cookie is saved in your browser, in which the consent you have given or the revocation of this consent is saved. This data is not passed on to the Borlabs Cookie provider. The recorded data is saved until you ask us to delete it or until you delete the Borlabs cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs
Cookie can be found at HTTPS://BORLABS.IO/KB/WHAT-INFORMATION-DOES-BORLABS-COOKIE-STORE/. The Borlabs cookie consent technology is used to obtain the legally required consents for the To obtain the use of cookies. The legal basis for this is Art. 6 Para. 1 S. 1 lit. c GDPR.
11.2 LEGAL BASIS FOR THE USE OF COOKIES
The data processed by cookies, which are required for the proper functioning of the website, are to safeguard our legitimate interests pursuant to Article 6 Paragraph 1 Sentence 1(f) GDPR.
For all other cookies you have given your consent to this through our opt-in cookie banner in accordance with Article 6 Paragraph 1(a) GDPR.
12. CONTENTS OF OUR WEBSITE
12.1 CONTACT/CONTACT FORM
Personal data is collected when you contact us (e.g. using our contact form or by email). If you use a contact form to get in touch with us, the contact form you use will indicate the data being collected. This data is stored and used exclusively for the purpose of responding to your query or establishing contact and the associated technical administration. The legal basis for data processing is our legitimate interest in responding to your request pursuant to Article 6 Paragraph 1(f)f GDPR. If the aim of you contacting us is to conclude a contract, processing is also legally based on Article 6 Paragraph 1(b) GDPR. Your data will be erased once we have finished processing your query. This is the case when it can be inferred from the circumstances that the relevant facts have been clarified in a conclusive manner and there are no statutory retention obligations in place that prevent its erasure.
12.2 APPLICATION MANAGEMENT/JOB EXCHANGE
We collect and process the personal data of applicants for the purpose of carrying out the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by email or via a web form on the website.
If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
If we do not conclude an employment contract with the applicant, the application documents will be automatically erased two (2) months after notification of the rejection decision, provided that no other legitimate interests of ours prevent their erasure. Other legitimate interests in this context include, for example, the duty to provide evidence in proceedings under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz [AGG]).
Legal basis for the processing of the data is Article 88 GDPR, § 26 I BDSG.
13. Server log files
The website provider automatically collects and stores information in so-called server log files that are automatically transferred to us by your browser. This information consists of:
– The browser type and version
– The operating system used
– Referrer URL
– Host name of the accessing computer
– Time of the server query
– IP address
These data are not amalgamated with other data sources.
The legal basis for data processing is Article 6 Paragraph 1 Sentence 1(f) GDPR. Our legitimate interest is based on the purposes listed above for the collection of data.
14. WEB ANALYTICS
GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (»Google«). Google Analytics uses »Cookies«, text files that are stored on your computer and enable analysis of your usage of the website. The information generated by the cookie about your usage of this website is generally transmitted to a Google server in the USA and stored there. In the event of an activation of IP anonymization on this website, your IP address will however previously be abbreviated by Google within the member states of the European Union or in other member states of the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there.
Google will use this information on our behalf to analyze your usage of the website, to compile reports on the web pages activities and to provide us with additional services related to the web pages and the Internet usage. The IP address transmitted by your browser within the framework of Google Universal Analytics is not compiled by Google together with other data. You can prevent the storage of the cookies by using the corresponding settings of your browser software; we draw your attention to the fact however that in such case you will not be able to use all of the functions on this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your usage of the website (including your IP address) to Google as well as the processing of such data by Google by downloading and installing the following browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
Alternative to the browser plug-in, you can prevent the collection of your data by Google Analytics by clicking on the following link: Disable the collection of data by Google Analytics for this website
This places an opt-out cookie that prevents the future collection of your data when visiting this website. You can find more information about this at http://tools.google.com/dlpage/gaoptout?hl=de and at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).
We draw your attention to the fact that Google Universal Analytics has been expanded on this website with the code »gat._anonymizeIp();« in order to ensure the anonymised collection of IP addresses (so-called IP masking).
15. Validity and changes to this Data Protection and Privacy Policy
This Data Protection and Privacy Policy is currently valid as of November 2020. As a result of the further development of our website and related products and services or due to altered legal provisions or such specified by official authorities, it can become necessary to change this Data Protection and Privacy Policy. You can view and print out the respectively current Data Protection and Privacy Policy at any time on this page. The contact information for our Data Protection Supervisor is: datenschutz@roekona.de.