Data protection
1. Scope
1.1 The following privacy policy applies to the use of the website and the services offered on it. This website is provided by the company “Rombach + Haas e.K,” which is responsible within the meaning of Art. 4 of the EU General Data Protection Regulation (“GDPR”). You can contact our data protection officer at info@rombachhaas.de or at our postal address Rombach und Haas, Sommerbergstr. 2, 78136 Schonach.
1.2 The protection of your personal data is important to us, especially with regard to the protection of personal rights when processing and using this information. Below, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, such as your name, address, email addresses, and user behavior.
2. Automated data collection and processing by the browser
2.1 As with any website, our server automatically and temporarily collects information in the server log files that is transmitted by the browser, unless you have deactivated this. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis: Art. 6 (1) (f) GDPR):
IP address of the requesting computer
File request from the client
The HTTP response code
the Internet page from which you visit us (referrer URL),
the time of the server request,
browser type and version,
operating system used by the requesting computer.
No personal evaluation of the server log files takes place. This data cannot be assigned to specific persons by the provider at any time. This data is not merged with other data sources.
2.2 This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.
According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Click here to deactivate Google Analytics:Deactivate Google Analytics
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are shortened before being processed, thus ruling out any possibility of personal reference. If the data collected about you is personally identifiable, it will be immediately excluded and the personal data will be deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analyt ics/terms/en.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
3. Collection and processing of voluntarily provided data
3.1 General contact
If you provide us with personal data by e-mail or via our website (surname, first name, e-mail address, postal address), this is generally done on a voluntary basis. This data is used to process the contractual relationship, to process your enquiries or orders, and for our own market or opinion research and for our own advertising by post and e-mail.
No further use, in particular the transfer of data to third parties for advertising, market or opinion research purposes, will be made. We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are legal retention obligations. The legal basis is Art. 6 (1) lit. b) GDPR or Art. 6 (1) lit. f) GDPR.
3.2 Newsletter
With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.
The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to address you personally.
We use the CleverReach service (CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany) to send our newsletters. CleverReach organizes and manages the sending of our newsletters. For this purpose, the data you provided when registering for our newsletter is stored by CleverReach in Germany or Ireland. CleverReach does not access the data of newsletter recipients and does not use it for any purpose other than sending our newsletter. You can find further information in CleverReach's privacy policy at: http://www.cleverreach.com/de/datenschutz/.
A so-called tracking pixel contained in our newsletter allows us to recognize when an email has been opened and whether links contained in the email have been clicked. This information is necessary to measure the success of our newsletter campaigns.
We base this data processing on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent to the storage and processing of your data in connection with the newsletter at any time. To do so, simply click on the revocation link in the newsletters themselves.
3.3 Online shop
If you wish to place an order in our online shop, you must provide the personal data required to process your order in order to conclude the contract. Mandatory information required to process the contract is marked separately; additional information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment details to our house bank or an online payment service provider. The legal basis for this is Art. 6 (1) (b) GDPR.
To shop in our online shop, you must create a customer account, which allows us to store your data for future purchases. When you create an account under “Login,” the data you provide will be stored revocably. You can delete all other data, including your user account, at any time in the customer area. The legal basis for this is Art. 6 (1) (b) GDPR.
We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.
Your data will only be used for as long as is necessary for the existing customer relationship. Notwithstanding this, we are obliged by commercial and tax law to store your address, payment, and order data for a period of ten years.
3.4 Application portal
You can apply for jobs on our career page, either on your own initiative or for specific job openings. We offer you the option of using our application portal for this purpose. You also have the option of registering on our application portal. Your data (name, email address, contact details, application documents) will only be processed within the scope of the respective job advertisement (Art. 6 (1) (b) GDPR, § 26 BDSG) or within the scope of your consent to use it for further job offers (Art. 6 (1) (a) GDPR). If you have given us your consent to process your application data, you can revoke this consent at any time.
Note on sensitive data: We expressly point out that applications, in particular resumes, references, and other data you provide to us, may contain particularly sensitive information about mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in a trade union or political party, or sex life.
By providing us with such information in your online application, you expressly agree that COMPANY may process this data for the purpose of processing your application. This data will be processed in accordance with this privacy policy and other relevant legal provisions.
If your application is rejected or turned down, the data you sent will be deleted at the earliest 3 months after the application process is over. This doesn't apply if legal rules say the data has to be kept or if it needs to be kept for evidence or if you've agreed to it being kept longer.
3.5 Contests
In the context of competitions, we use your data (name, contact details) for the purpose of notifying you of your winnings (Art. 6 (1) (b) GDPR) and advertising our offers by post (Art. 6 (1) (f) GDPR) or by email with your consent (Art. 6 (1) (a) GDPR). Additional information can be found in the terms and conditions of participation for the respective competition.
4. Disclosure to third parties
4.1 If you have provided us with personal data, this will not be disclosed to third parties. Disclosure will only take place within the scope of your consent (see section 3.2). When the data is collected, you will be informed of the recipients or categories of recipients.
in the context of processing your inquiries, your orders, and the use of our services, to subcontractors who receive the necessary data solely for the purpose of carrying out this order and use it for the specified purpose.
in the context of order data processing in accordance with Art. 28 GDPR to external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and the provisions of the GDPR, and are regularly monitored.
Within the scope of fulfilling legal obligations to authorities entitled to receive information.
4.2 Social plugins are used on this website. Social plugins are web applications that connect this website to selected social networks. Through this connection, your IP address and user data from the respective social network may be transmitted to it. For details on the social plugins used, please refer to section 6.
5. Cookies
5.1 The website uses cookies. Cookies are small text files that are stored locally in your browser's cache. The following types of cookies, whose scope and functionality are explained below, are used on this website:
Transient cookies (see 5.2)
Persistent cookies (see 5.3).
5.2 Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
5.3 Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
5.4 You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
5.5 On our website, we use the “Cookie Consent” application from Silktide (Silktide Ltd, Brunel Parkway, Pride Park, Derby, DE24 8HR (UK)). This is a plugin that can be used to obtain consent for the use of cookies and/or tracking technologies. “Cookie Consent” may collect your IP address. The legal basis for this is Art. 6 (1) lit. f) GDPR. For more details about this tool, please visit https://cookieconsent.insites.com/.
6. Social networks, marketing tools
On our website, you will find links to the social network Facebook, as well as other marketing tools that establish a connection to the respective networks. The following data protection information applies in this regard:
6.1 Furthermore, the website uses the remarketing function “Custom Audiences” from Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA (“Facebook”). This allows users of the website to be shown interest-based advertisements (“Facebook Ads”) when visiting the social network Facebook or other websites that also use this process. Our aim is to show you advertisements that are of interest to you in order to make our website more interesting for you.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding page of our website or clicked on one of our ads.
If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or are not logged in, it is possible that the provider may obtain and store your IP address and other identifying features.
Logged-in users can deactivate the “Facebook Custom Audiences” function at https://www.facebook.com/settings/?tab=ads.
The legal basis for the processing of your data is our legitimate interest in analyzing usage behavior and optimizing our website and advertising (Art. 6 (1) (f) GDPR). Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.
6.2 We use Google Tag Manager. This is merely a management system that allows us to integrate the other Google services described below into our website. Google Tag Manager itself does not process any personal data. This is done solely by the Google services described below in the manner described there.
6.3 This website also uses the remarketing function of the online advertising service Google AdWords, which allows us to present you with advertising tailored to your interests. Our aim is to show you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements can be identified by the “Google Ads” label in the respective advertisement.
When you visit our website, Google receives information that you have accessed our website. Google uses a web beacon to place a cookie on your computer. The data mentioned in section 2.1 of this statement is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data is transferred to the US and evaluated there. If you are logged in with your Google account, your data can be directly assigned to it. If you do not want this assignment to your Google profile, you must log out. It is possible that this data may be passed on to third parties and authorities that are contractual partners of Google. The legal basis for the processing of your data is Art. 6 (1) (f) GDPR.
You can prevent the installation of cookies from Google AdWords in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by deactivating interest-based ads on Google via the link www.google.de/ads/preferences, whereby this setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from providers who are part of the “About Ads” self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers via the link www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all functions of this website to their full extent.
Further information on the purpose and scope of data collection and processing, as well as further information on your rights and settings options for protecting your privacy, can be obtained from: Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA; Advertising privacy policy: http://www.google.de/intl/de/policies/technologies/ads.
6.4 This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.
You can prevent participation in this tracking process in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”; c) by deactivating interest-based ads from providers who are part of the “About Ads” self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers at the link www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Further information about DoubleClick by Google can be found at www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090
7. Your rights
We hereby inform you that, in accordance with Article 15 et seq. of the GDPR, you have the right to obtain from us information about the personal data concerned, as well as the right to rectification or erasure or restriction of processing or a right to object to processing, and the right to data portability, under the conditions defined therein. You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR if you believe that the processing of your personal data violates this regulation.
If the processing is based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR (consent), you also have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal.
8. Questions
If you have any questions regarding the processing of your personal data, you can contact our data protection officer directly, who is also available in the event of requests for information, applications, revocation, or complaints.
Contact details for the data protection officer
Rombach + Haas e.K.
Management: Selina Kreyer, née Haas
Sommerbergstr.2
78136 Schonach
Email: info@rombachhaas.de