Privacy statement

Data protection regulations (GDPR) for website Reclay Holding GmbH and sub-pages

The protection and security of your (hereinafter referred to as "user") personal data within the meaning of Article 4 No. 1 of the General Data Protection Regulation (hereinafter referred to as "GDPR") (hereinafter referred to as "pbD") are important to us. Accordingly, we comply with the statutory provisions in order to offer the pbD of each user appropriate protection. In the following, we would like to inform you about the type, scope and purpose of pbD processing:

Reclay Holding GmbH (hereinafter referred to as "Reclay Group" or "we") processes pbD exclusively within the framework of the GDPR and within the scope of the data protection regulations specified under Art. 95 GDPR in conjunction with §§ 11-15a Telemedia Act ("TMG"). This data protection declaration (hereinafter referred to as "DSE") provides the information pursuant to Art. 13 GDPR for the use of the website www.reclay-group.com including the sub-pages. We first explain who is the data controller and who is the data protection officer, then, arranged according to the types of access in the various areas of the website, the information on the types of pbD, the purposes and legal basis of the processing, any recipients and any legitimate interests, deletion periods and, if applicable, further information. At the end of this privacy policy we explain your rights.

 

1. Contact details of the person responsible (Art. 13 para. 1 letter a) GDPR)

Responsible for the operation of the website, including all sub-pages, and for handling the pbD processed here is:

Reclay Systems GmbH
Austr. 34
35745 Herborn
Deutschland

+49 (0) 221 580 098 2888

[email protected]

 

2. Contact details of the data protection officer (Art. 13 para. 1 letter b) GDPR)

Our data protection officer is Mrs. Daniela Roloff, c/o con eco GmbH, Lindenallee 41, 50968 Köln, email address [email protected].

 

3. Accessing the website, using the search function on the website and downloading documents in the freely accessible area of the website

a. Types of personal data: Each time the website is called up, when using the search function and when downloading documents in the freely accessible area of the website, the following log files of the respective user are automatically recorded: Information about the type and version of browser used, the user's operating system, the address of the previously visited website (referrer), the user's IP address, date and time of access.

b. Purposes of processing (Art. 13 para. 1 lit. c) GDPR): The log files are processed in order to ensure the functionality of the website, to enable the download or to serve your search query. The data also serves to ensure the security of the information technology systems on which the website is operated. The data is not evaluated for marketing or other purposes.

c. Legal basis for the processing, legitimate interests (Art. 13 para. 1 lit. c) and d) GDPR): The legal basis for the processing of log file data is art. 6 par. 1 letter f) DPA, i.e. the legitimate interests of the RECLAY GROUP. These our legitimate interests consist in being able to provide you with our web offer including the download of documents.

d. Recipient / third party / third country transmission (Art. 13 para. 1 lit. e) and f) GDPR): Data will not be transferred to third parties (Art. 4 No. 10 GDPR). All data are processed on computers within the European Union. There is no transfer of data to a third country, nor is there any intention to do so. A transfer of pbD to state institutions and authorities is only carried out within the framework of legal regulations.

e. Deletion periods (Art. 13 para. 2 lit. a) GDPR): The data is deleted at the latest when you end your visit to the website, i.e. when you close the browser on your computer. Data on the server (log files) are deleted cyclically every 14 days for technical reasons.

 

4. Use of the contact form

Before using the contact form (sending the completed form on the sub-website www.reclay-group.com), the user must agree to the processing of the pbD associated with the use of the contact form in accordance with the following regulations by activating a check mark, otherwise the completed form cannot be sent. Regarding the right to revoke a granted consent at any time, see section 8.

a. Types of personal data: Data types are first name / last name, e-mail, company / institution, message content, technical logging of a declared consent.

b. Purposes of processing (Art. 13 para. 1 lit. c) DPA): The purpose is to reply to the user's enquiry and subsequently, if necessary, to initiate, establish and implement a business relationship, depending on the type of enquiry.

c. Legal basis for the processing (Art. 13 para. 1 lit. c) GDPR): The legal basis is Art. 6 para. 1 lit. a) GDPR, i.e. a declared consent and, depending on the further course of the communication, for the initiation and implementation of a business relationship, Art. 6 para. 1 lit. b) GDPR.

d. Recipient / third party / third country transmission (Art. 13 para. 1 lit. e) and f) GDPR): User data will not be transmitted to third parties (Art. 4 No. 10 GDPR) unless the user expressly requests such transmission in his enquiry and his consent also relates to it. All data is processed on computers within the European Union. A transfer to a third country does not take place and is not intended. A transfer of pbD to state institutions and authorities will only take place within the framework of legal regulations.

e. Deletion periods (Art. 13 para. 2 lit. a) GDPR): The data will be deleted three months after completion of the request, unless the nature of the request requires a different treatment (e.g. processing of advice) or the consent given is revoked earlier. If the enquiry leads to a contractual relationship or is preparing such a relationship, the data will be deleted in accordance with the statutory provisions, at the latest three months after the intended contractual or pre-contractual relationship has ended, unless Art. 17 para. 3 GDPR intervenes, in particular if there are statutory storage obligations and/or the data is required for the assertion, exercise or defence of legal claims or against legal claims.

 

5. Contact by e-mail using the e-mail addresses given on the website (unless application, see point 7)

At various points on the website, we give you the opportunity to contact us directly by e-mail by providing an e-mail address.

a. Types of personal data: Types are e-mail address, log files on the characteristics of the e-mail and the time of receipt, and also all pbD given in the e-mail by the sender.

b. Purposes of processing (Art. 13 para. 1 lit. c) GDPR): The purpose is to reply to the user's enquiry and subsequently, if necessary, to initiate, establish and carry out a business relationship, depending on the type of enquiry.

c. Legal basis for the processing (Art. 13 para. 1 lit. c) GDPR): The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR, if the sender is not yet a customer or is not already in a business relationship or its initiation with us in some other way. If a contractual relationship already exists or is to be initiated on the initiative of the consignor, the legal basis is Art. 6 para. 1 lit. b) GDPR.

d. Legitimate interests in processing on the basis of Art. 6 para. 1 lit. f) GDPR (Art. 13 para. 1 lit. d) GDPR): Our legitimate interests consist in informing you and answering your enquiry, and, if necessary, entering into a business relationship with you if this is part of your request.

e. Recipient / third party / third country transmission (Art. 13 para. 1 lit. e) and f) GDPR): The data will not be transferred to third parties (Art. 4 No. 10 GDPR) unless the user expressly consents, insofar as these are affiliated companies. All e-mails are processed on computers within the European Union. An agreement exists with the mail host for order processing in accordance with Art. 28 GDPR. A transfer to a third country does not take place and is not intended. A transmission of pbD to state institutions and authorities is only carried out within the framework of legal regulations.

f. Deletion periods (Art. 13 para. 2 lit. a) GDPR): The data will be deleted three months after the technical completion of the enquiry, unless the nature of the enquiry gives rise to a different treatment (e.g. processing of advice). If the enquiry leads to a contractual relationship or prepares for such a relationship, the data will be deleted in accordance with the statutory provisions if the intended contractual or pre-contractual relationship is terminated, namely three months after its termination, unless Art. 17 Para. 3 GDPR intervenes, in particular if statutory retention obligations exist and/or the data is required for the assertion, exercise or defence of legal claims or against legal claims.

 

6. Submission of application documents

At www.reclay-group.com we give you the opportunity to submit your application for a job with us by e-mail.

a. Types of personal data: Types are e-mail address including the logging of the e-mail on our computers as well as all pbD contained in your e-mail which concern your application, e.g. title, surname, first name, details from the curriculum vitae, certificates and the like.

b. Purposes of processing (Art. 13 para. 1 lit. c) GDPR): The purpose of the processing is the selection of applicants and the possible establishment of an employment relationship.

c. Legal basis for the processing (Art. 13 Paragraph 1 lit. c) GDPR): The legal basis is § 26 BDSG (new), and possibly Art. 6 Para. 1 lit. b) GDPR(e.g. when applying for freelance work).

d. Recipient / third party / third country transfer (Art. 13 Para. 1 lit. e) and f) GDPR): A transfer of data to third parties (Art. 4 No. 10 GDPR) may be made to affiliated companies, but not otherwise. All e-mails are processed on computers within the European Union; an agreement exists with the host of the e-mails for order processing in accordance with Art. 28 GDPR. A transfer to a third country does not take place and is not intended. A transmission of pbD to state institutions and authorities will only take place within the framework of legal regulations.

e. Deletion periods (Art. 13 para. 2 lit. a) GDPR): The data will be deleted within three months of the end of the application procedure (decision on whether or not to consider your application), unless (i) the application was successful and all application documents are attached to the personnel file (Section 26 BDSG), (ii) you have expressly declared your consent in your capacity as applicant to be included in a talent pool for a certain period of time (after which the data will be deleted) and/or (iii) Art. (iii) Art. 17 para. 3 GDPR intervenes, in particular if there are statutory retention obligations and/or the data is required for the assertion, exercise or defence of legal claims or against legal claims

 

7. Use of cookies and analysis tools

a. Cookies

RECLAY GROUP uses so-called "cookies". Cookies are small text files that store settings of websites, e.g. in the user's web browser, in the context of website use. The purpose of cookies is to make the website easier to use. RECLAY GROUP. exclusively uses so-called session ID cookies. These are only stored for the current session in the user's web browser and are automatically deleted when the browser is closed. Each user is free to prevent the installation of such cookies by setting his browser accordingly. In this case, however, it may be that not all functions of the website can be used to their full extent.

b. Google Analytics

We use Google Analytics in our Internet presence. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".

Through the certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU will also be observed when processing data in the USA.

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.

We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your data during future visits to this website: Disable Google Analytics

More information on how Google Analytics handles user data can be found in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

 

8. The rights of the user (Art. 13 para. 2 letters b) - e), Art. 7 para. 3 GDPR)

If the legal requirements are met, the user has the right at any time to information about pbD that we have stored about him, Art. 15 GDPR, as well as the right to correction, Art. 16 GDPR, restriction of processing, Art. 18 GDPR, deletion of his data, Art. 17 GDPR.

If the user has asserted the right to correction, deletion or restriction of processing against RECLAY GROUP, RECLAY GROUP will notify all possible recipients to whom the pbD in question has been disclosed of this correction or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Likewise, the user has the right to revoke any consent once granted (Art. 7, Art. 6 para. 1 lit. a) GDPR), Art. 7 para. 3 GDPR). The proper revocation of consent does not affect the legality of the data collection carried out up to that point.

In addition, the user has the right to object at any time, for reasons arising from their particular situation, to the processing of the pbD concerning them, which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, Art. 21 GDPR.

In addition, if the legal requirements are met, the user has the right to receive his pbD, which he has provided to RECLAY GROUP, in a structured, common and machine-readable format (right of data transferability, Art. 20 GDPR).

For the purpose of exercising these rights, the user shall contact the offices specified under item 1 or 2.

Furthermore, the user has the right to appeal to a supervisory authority if the legal requirements are met, Art. 77 GDPR.

 

9. Webshop

This part of the data protection regulations applies to the web shop of the responsible person at the address www.reclay-group.com. The web shop can only be used if a customer account has been created beforehand. In addition, the regulations in section 3 apply to the general use of the website.

a. Types of personal data: When a customer account is created, the following pbD are processed. When goods or services are ordered, the surname / first name, postal address (for invoice and delivery of goods), e-mail address, [...], bank details or credit card number of the user are processed for the purpose of concluding and processing the contract.

b. Purposes of processing (Art. 13 para. 1 lit. c) GDPR): The purpose of the processing is aimed at bringing about and processing the sale of goods or the provision of services, including aftercare after the transaction has been completed (advice, liability for defects, etc.).

c. Legal basis for the processing (Art. 13 para. 1 lit. c) GDPR): The legal basis is Art. 6 para. 1 lit. b) GDPR, a contractual relationship to be initiated or existing.

d. Recipient / third party / third country transfer (Art. 13 para. 1 lit. e) and f) GDPR): Data will not be transferred to third parties (Art. 4 No. 10 GDPR) unless the user expressly consents. Within the framework of the conclusion of the contract, consent is given to transfer the data necessary for processing to a payment processing service provider as well as to partners for financial services and, if applicable, to SCHUFA, Creditreform or Hermes Kreditversicherung (credit checks). The data required for delivery may be transferred to a transport company to be engaged or to any other third party necessary for the delivery of the goods, with whom there is an agreement on order processing in accordance with Art. 28 GDPR. All data is processed on computers within the European Union. With the host of the web shop an agreement for order processing according to Art. 28 GDPR is agreed upon. A transfer to a third country does not take place and is not intended. A transfer of pbD to state institutions and authorities will only take place within the framework of legal regulations.

e. Deletion periods (Art. 13 para. 2 lit. a) GDPR): The data will be processed for the duration of the business relationship to the extent necessary for this purpose. Otherwise they will be deleted. In the case of terminated business relationships, the data will be deleted six months after the end of the business relationship. This does not apply insofar as Art. 17 Para. 3 GDPR intervenes, in particular statutory storage obligations exist (10 years storage for documents in accordance with the German Fiscal Code and six years for business documents in accordance with the German Commercial Code) and/or the data is required for the assertion, exercise or defence of legal claims or against legal claims (e.g. claims for defects or their defence).