Search is currently not available.

Rhenus :people!

Your customer care expert

Privacy policy

I. Responsible person in the sense of the data protection laws

Rhenus :people! Bamberg GmbH
Hafenstraße 13
96052 Bamberg
people@de.rhenus.com

 

II. Data Protection Officer

If you have any questions regarding the processing of your personal data by us, please contact our data protection officer in writing or by e-mail:

RDP Röhl · Dehm & Partner Rechtsanwälte mbB
Moritzplatz 6
86150 Augsburg
dsb.people@rdp-law.de

 

 

III. General information on data processing by us

Scope of the processing of personal data in general

In principle, we only process personal data on our website insofar as this is necessary to provide a functioning website as well as our content and services.

 

Legal basis for the processing of personal data

The respective legal basis for the processing of personal data results from the Basic Data Protection Regulation, Article 6 para. 1 lit. a) - f) GDPR.

The following applies in principle:

In case of consent of the data subject, Article 6 para. 1 lit. a) GDPR is the legal basis.

Article 6 para. 1 lit. b) GDPR is the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party or for processing operations in the case of pre-contractual measures.

If processing is necessary for compliance with a legal obligation of the controller, Article 6 para. 1 lit. c) GDPR is the legal basis.

If the vital interests of the data subject or another natural person make processing necessary, Article 6 para. 1 lit. d) of the GDPR shall be the legal basis.

If the processing is

necessary for the performance of a task carried out in the public interest

or

in the exercise of official authority

which has been delegated to the controller, the legal basis is Article 6 para. 1 lit. e) GDPR.

If processing is necessary to protect a legitimate interest of our company and the interests, fundamental freedoms or fundamental rights of the data subject do not override this, the legal basis is Article 6 para. 1 lit. f) GDPR.

Which of these legal bases forms the basis for the respective processing can be seen in the further descriptions of this data protection information.

 

Provision of personal data required for the conclusion of a contract or due to legal storage obligations

When you contact us, we collect personal data. Depending on the nature of your enquiry, it may be that contacting us already serves to prepare the conclusion of a contract. In this case, the data requested is necessary in order to be able to conclude the contract with you; in addition, this data may then be subject to further statutory retention obligations.

Before providing us with your personal data, you are welcome to ask your respective contact person in our company whether we need your data to conclude a contract and/or our legal retention obligations and what the consequences are if you do not provide us with the data.

 

SSL or TLS encryption

For security reasons and to protect your confidential data, we use SSL or TLS encryption on our website.

This encryption enables confidential data, such as enquiries that you send to us, to be transmitted securely.

 

IV. Automatic data processing when calling up the website www.rhenus-people.de

Personal data is already processed when the page is called up. This happens automatically without you having to take any further action, such as filling in and sending a contact form.

These automated processing operations concern:

 

Processing of the IP address

1. Description and scope of data processing


When this page is called up, requests are sent to the server, which must answer them. For this purpose, your IP address must be collected and processed in order to be able to answer the corresponding server requests.

2. Legal basis for data processing


The legal basis for the processing of this data is Article 6 para. 1 lit. f) GDPR.

3. Purpose of the data processing


The purpose of processing your IP address is to ensure the functionality of the website and the provision of the technical retrieval option.

4. Legitimate interest


The legitimate interest in the temporary storage of the IP address is that the functionality and provision of the technical retrieval option of the website is not possible without this storage.

5. Duration of storage


The data is deleted again as soon as further storage is no longer necessary due to the achievement of the purpose.

In the case of the collection of data for the provision of the website, this is the case when the retrieval process has ended.

6. Recipients of personal data


The IP address is processed by the following hosting provider on behalf on the basis of a commissioned processing agreement pursuant to Article 28 para. 2 - 4 GDPR:



Rhenus Assets & Services GmbH


Rhenus Platz 1


59439 Holzwickede



Administrative access to the data within the scope of maintenance and services:


IT service provider: Rhenus Assets & Services GmbH & Co. KG

 

Processing within the framework of hosting

1. Description and scope of data processing


We use the services of our hosting service provider for the technical realisation of the website and its accessibility as well as its technical maintenance.

This includes the provision of storage and database services as well as maintenance and servicing.

2. Legal basis for data processing


The legal basis for the processing of this data is Article 6 para. 1 lit. f) GDPR.

3. Purpose of the data processing


The purpose of the processing is the realisation of the online offer as well as the detection of malfunctions and intrusion attempts.

4. Legitimate interest


Our legitimate interest in commissioning the hosting service provider is the external technical expertise and the provision of a functional and uncompromised technical website environment.

5. Recipients of personal data and data categories:


The following hosting provider acts on our behalf on the basis of a commissioned processing agreement pursuant to Article 28 para. 2 - 4 GDPR:

Rhenus Assets & Services GmbH


Rhenus Platz 1


59439 Holzwickede

Data categories concerned are:

  • User data
  • Communication data
  • Contact data

Administrative access to the data within the scope of maintenance and services:


IT service provider: Rhenus Assets & Services GmbH & Co. KG

 

Processing of server log files

1. Description and scope of data processing


The IP addresses collected when this page is accessed are also stored in so-called server log files in order to identify and rectify technical faults and/or attempts to manipulate or break into the server structure.

In addition, the hosting provider of this website automatically collects, stores and processes information in so-called server log files, which are automatically transmitted by your browser.

This information is:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Time of the server request

However, this information is not merged with other data sources.

2. Legal basis for data processing


The legal basis for the processing of this data is Article 6 para. 1 lit. f) GDPR.

3. Purpose of the data processing


The purpose of processing your IP address and the above information is to detect malfunctions and intrusion attempts.

4. Legitimate interest


The legitimate interest in processing the IP address and the above information is to provide a functional and uncompromised technical website environment.

5. Duration of storage


The data will be deleted again within 99 days.

6. Recipients of personal data


The IP address and the above information are processed by the following hosting provider on behalf on the basis of a commissioned processing agreement pursuant to Article 28 para. 2 - 4 GDPR:

Rhenus Assets & Services GmbH & Co. KG


Rhenus Platz 1


59439 Holzwickede

Administrative access to the data within the scope of maintenance and services:


IT service provider: Rhenus Assets & Services GmbH & Co. KG

 

Use of cookies

1. Description and scope of data processing


The website

www.rhenus-people.de

makes use of so-called "cookies". Cookies are text files that are stored in the memory and/or on a data carrier of your device used to visit the site and that are processed by your internet browser according to the settings stored there.

2. Legal basis for data processing


The legal basis for the processing is Article 6 para. 1 lit. f) GDPR.

3. Purpose of the data processing


Cookies contain technical information on the provision of website functionalities in the context of use or on your user behaviour on our website. This enables the technical realisation of the website. In addition, the cookies are used to realise the language settings you have chosen and by determining

4. Legitimate interest according to Article 6 para. 1 lit. f) GDPR


The use of these cookies is necessary in order to be able to offer the user a functionality of our website that meets his or her expectations and to be able to continuously improve this website in accordance with the users' expectations.

5. Duration of storage and options for objection and removal


If so-called "session cookies" are used on this website, they are automatically deleted from your computer's browser cache/memory at the end of your visit to the website and/or when you close your browser, provided that you have activated this functionality in your browser.

Please check the settings of your internet browser (e.g. Firefox, Internet Explorer, Edge, Chrome, Opera, Safari). Your internet browser also gives you the option of regulating the handling of cookies or deactivating them altogether. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to its full extent.

 

V. Processing of personal data through the contact form

1. Description and scope of data processing


A contact form is available on our website to enable you to contact us electronically. We process your personal data to respond to your contact request.

For enquiries via the contact form, the following data is processed:

  • Subject*
  • Name*
  • e-mail address*
  • Your message*

The fields marked with an "*" symbol are mandatory fields, without which no enquiry can be sent to us via this contact form.

The name is used to address you personally when processing your enquiry.

No data is transmitted to us when the data is merely entered in the forms; this only happens after the "Send" button has been pressed.

The following data is also processed at the time the message is sent:


Time of sending

2. Legal basis for data processing


The legal basis for the processing of personal data for handling and answering your enquiries is Article 6 para. 1 lit. f) GDPR.

The legal basis for the processing of personal data that serve the preparation and/or implementation of a contractual relationship is Article 6 para. 1 lit. b) GDPR.

3. Purpose of the data processing


The processing of personal data via the contact form serves the sole purpose of establishing contact and enabling the company to address the customer for information purposes on the customer's initiative (answering the enquiry).

Depending on the intention and content of your enquiry, the purpose may also be the initiation and/or implementation of a contractual relationship, in which case the purpose is also to maintain the customer relationship.

4. Legitimate interest


The legitimate interest in data processing lies in the possibility of processing your enquiry and being able to respond to you in accordance with your enquiry. The data collected is processed on the basis of an enquiry from you. This processing is also in your interest in order to be able to respond to your enquiry in accordance with your expectations.

5. Duration of storage


The data will be deleted within 6 months after it is no longer required to achieve the purpose for which it was collected or is not subject to any further legal retention obligations (e.g. 10 years according to the German Tax Code [AO], 6 years according to the German Commercial Code [HGB]). For your data entered in the contact form, this is the case when the respective conversation with the user has ended.

The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

VI. Processing of personal data when contacting customers and suppliers and handing over business cards

1. Description and scope of data processing


In the course of establishing contact, handing over business cards or carrying out the business and customer relationship, we process personal data of the contact persons and employees involved. This mostly concerns the contact details of the internal contact persons provided to us by our customers.

This data is entered into our CRM system as well as processed in the Outlook address book.

This data can be:

  • Last name, first name
  • Company
  • E-mail address
  • Telephone number, mobile number
  • Position in the company

2. Legal basis for data processing and legitimate interest


The legal basis for processing is Article 6 para. 1 lit. b) GDPR, insofar as the data is processed for the initiation or implementation of a contractual relationship.

In addition, in the case of employees as contact persons, the legal basis is Article 6 para. 1 lit. f) GDPR, as the processing is carried out in the legitimate interest.

This legitimate interest arises from the fact that the data was given to us for the purpose of maintaining contacts and establishing contact at a later date. In addition, the processing of contact persons’ data is necessary to maintain a business relationship.

3. Purpose of the data processing


This data is processed exclusively for the purpose for which the data was given to us (by handing over the business card, by naming the responsible contact person, etc.).

Purposes can be, for example:

  • When handing over a business card, the purpose is to establish contact at a later date in order to discuss common business interests.
  • If you are designated as a contact person, the purpose is to carry out specific contractual measures.

4. Duration of storage


The data will be deleted within 6 months after it is no longer required to achieve the purpose for which it was collected or is not subject to any further legal retention obligations (e.g. 10 years according to the German Tax Code [AO], 6 years according to the German Commercial Code [HGB]).

5. Recipients of personal data


Administrative access to the data within the scope of maintenance and services:

IT service provider: Rhenus Assets & Services GmbH

Our service providers are commissioned to act on our behalf and on the basis of a commissioned processing agreement pursuant to Article 28 para. 2 - 4 GDPR.

6. Transfer of personal data to a third country


We do not intend to transfer personal data to a third country or to an international organisation.

 

VII. Processing of personal data via e-mail

1. Description and scope of data processing


In the event of enquiries submitted by e-mail, personal data will be processed depending on the content of your e-mail:

This is in any case your e-mail address, date and time as well as the content of the message. In addition, the following personal data, for example, may be processed depending on the content of your e-mail:

  • First name, last name
  • Phone number

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. Legal basis for data processing


Based on the user's express request via e-mail, the legal basis for processing the data is Article 6 para. 1 lit. f) GDPR. If the purpose of the contact via e-mail is also the conclusion and/or implementation of a contract, the additional legal basis for the processing is Article 6 para. 1 lit. b) GDPR.

3. Purpose of the data processing


Your personal data is processed via your e-mail enquiry solely for the purpose of establishing contact and enabling the company to contact the customer for information purposes on the customer's initiative.

The purpose may also be the initiation and/or implementation of a contractual relationship, depending on the intention and content of your enquiry.

4. Legitimate interest


The legitimate interest in data processing lies in the possibility of processing your enquiry and being able to respond to you in accordance with your enquiry. The data collected is processed on the basis of an enquiry from you. This processing is also in your interest in order to be able to respond to your enquiry in accordance with your expectations.

5. Duration of storage


The data will be deleted within 6 months after it is no longer required to achieve the purpose for which it was collected or is not subject to any further legal retention obligations (e.g. 10 years according to the German Tax Code [AO], 6 years according to the German Commercial Code [HGB]). This is the case for your e-mail when the respective conversation with the user has ended.

The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

VIII. Processing of personal data via telephone

1. Description and scope of data processing


In the case of telephone enquiries, personal data is processed depending on the content of the conversation:

Depending on the information you provide during the telephone call, this may include the following personal data:

  • First name, last name
  • Phone number
  • Customer number
  • Payment data
  • Contract data

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. Legal basis for data processing


Based on the user's express request via telephone, the legal basis for processing the data is Article 6 para. 1 lit. f) GDPR. If the contact via telephone also has the objective of concluding and/or executing a contract, the additional legal basis for the processing is Article 6 para. 1 lit. b) GDPR.

3. Purpose of the data processing


Your personal data is processed via your telephone enquiry solely for the purpose of establishing contact and enabling the company to contact the customer for information purposes on the customer's initiative.

The purpose may also be the initiation and/or implementation of a contractual relationship or the maintenance of customer relationships, depending on the intention and content of your enquiry.

4. Legitimate interest


The legitimate interest in data processing lies in the possibility of processing your enquiry and being able to respond to you in accordance with your enquiry. The data collected is processed on the basis of an enquiry from you. This processing is also in your interest in order to be able to respond to your enquiry in accordance with your expectations.

5. Duration of storage


The data will be deleted within 6 months after it is no longer required to achieve the purpose for which it was collected or is not subject to any further legal retention obligations (e.g. 10 years according to the German Tax Code [AO], 6 years according to the German Commercial Code [HGB]). This is the case for your e-mail when the respective conversation with the user has ended.

The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

IX. Processing of personal data via fax

1. Description and scope of data processing


In the event of enquiries submitted by fax, personal data will be processed depending on the content of your fax

This is in any case your fax number, date and time as well as the content of the message. In addition, the following personal data, for example, may be processed depending on the content of your message:

  • First name, last name
  • Phone number
  • Customer number
  • Payment data
  • Contract data

The data is used exclusively for the processing of the conversation and/or the implementation and/or initiation of a contractual relationship.

2. Legal basis for data processing


Based on the user's express request via fax, the legal basis for processing the data is Article 6 para. 1 lit. f) GDPR. If the contact via fax also has the objective of concluding and/or executing a contract, the additional legal basis for the processing is Article 6 para. 1 lit. b) GDPR.

3. Purpose of the data processing


Your personal data is processed via your fax enquiry solely for the purpose of establishing contact and enabling the company to contact the customer for information purposes on the customer's initiative.

The purpose may also be the initiation and/or implementation of a contractual relationship, depending on the intention and content of your enquiry.

4. Legitimate interest


The legitimate interest in data processing lies in the possibility of processing your enquiry and being able to respond to you in accordance with your enquiry. The data collected is processed on the basis of an enquiry from you. This processing is also in your interest in order to be able to respond to your enquiry in accordance with your expectations.

5. Duration of storage


The data will be deleted within 6 months after it is no longer required to achieve the purpose for which it was collected or is not subject to any further legal retention obligations (e.g. 10 years according to the German Tax Code [AO], 6 years according to the German Commercial Code [HGB]). This is the case for fax enquiries when the respective conversation with the user has ended.

The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

 

Processing of personal data as part of the application process via the careers portal

1. Description and scope of data processing


We regularly publish information about current vacancies within the Rhenus Group, including vacancies at Rhenus BPO Services GmbH, on our careers portal or on our website. Via the career portal of the Rhenus Group, you have the opportunity to apply for vacancies at Rhenus BPO Services GmbH. You can send us your application data electronically directly via the careers portal.

Data that you send to us as part of the application process can be:

  • Name, address
  • Date of birth
  • Contact details (e-mail and telephone)
  • Salary expectations and availability
  • Personal cover letter
  • Curriculum vitae including all other annexes (references, certificates, proofs, etc.)
  • Qualifications
  • Interests

The data will be used exclusively within the scope of the application procedure for the purpose of deciding on the filling of the position.

2. Legal basis for data processing


The legal basis for processing the data within the scope of the application procedure is Article 6 para. 1 lit. b) GDPR, Article 26 para. 1 GDPR.

If you provide us with special categories of personal data within the scope of the application procedure, such as e.g. an existing severely disabled status or health data that are necessary for the assessment of your employability for a specific position, the processing of these data provided on your initiative is carried out in accordance with Article 9 para. 2 lit. b), lit. h) GDPR, § 26 para.3 GDPR.

3. Purpose of the data processing


We process personal data within the scope of the application procedure solely for the purpose of personnel planning and the establishment of employment relationships.

4. Legitimate interest


The legitimate interest in data processing stems from the need to fill vacancies with qualified applicants within the framework of viable personnel planning and corporate management.

5. Duration of storage


If an application is rejected, the data is deleted within 6 months of the rejection. Data of successful applications are subject to the retention obligations resulting from labour law and social law regulations, the the German Tax Code (AO) and the German Commercial Code (HGB).

6. Recipients of personal data


The application data is processed by the following service provider on behalf of the company on the basis of an order processing agreement pursuant to Article 28 para. 2 - para. 4 GDPR:

Administrative access to the data in the context of maintenance and services: IT service provider:


Rhenus Assets & Services GmbH & Co. KG

 

Processing of personal data in the case of an unsolicited application

1. Description and scope of data processing. If you do not apply to us via the Rhenus Group career portal but directly and proactively, we must also process your personal data for this purpose.

You can send us your unsolicited application either by post or by e-mail.

In doing so, we may process the following personal data:

  • Name, address and contact details
  • Curriculum vitae including all other details
  • Personal cover letter
  • Qualifications
  • Interests

If you send us your data by e-mail, we will also process your e-mail address, date and time as well as the content of the message. In addition, the following personal data, for example, may be processed depending on the content of your e-mail:

  • First name, last name
  • Phone number

The data will be used exclusively within the scope of the application procedure for the purpose of deciding on the filling of the position.

2. Legal basis for data processing


The legal basis for processing the data within the scope of the application procedure is Article 6 para. 1 lit. b) GDPR, Article 26 para. 1 GDPR.

If you provide us with special categories of personal data within the scope of the application procedure, such as e.g. an existing severely disabled status or health data that are necessary for the assessment of your employability for a specific position, the processing of these data provided on your initiative is carried out in accordance with Article 9 para. 2 lit. b), lit. h) GDPR, § 26 para.3 GDPR.

3. Purpose of the data processing


We process personal data within the scope of the application procedure solely for the purpose of personnel planning and the establishment of employment relationships.

4. Legitimate interest


The legitimate interest in data processing stems from the need to fill vacancies with qualified applicants within the framework of viable personnel planning and corporate management.

5. Duration of storage


If an application is rejected, the data is deleted within 6 months of the rejection. Data of successful applications are subject to the retention obligations resulting from labour law and social law regulations, the the German Tax Code (AO) and the German Commercial Code (HGB).

6. Recipients of personal data


Your application data will not be passed on to third parties.

 

X. Google Analytics

1. Description and scope of data processing


This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files stored on your device, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operating company of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The "User ID" function for barrier-free tracking is deactivated.

Google makes use of this information to evaluate the use of the website on behalf of the operating company of this website. Furthermore, this information is used to create reports on website activity and to provide the operating company of the website with other services related to website and internet usage.

2. Legal basis for data processing


The legal basis for data processing is Article 6 para. 1 lit. f) GDPR

3. Purpose of the data processing


The purpose of the data processing is web analysis and the provision of services by Google to the website operator.

4. Legitimate interest


We use Google Analytics on our website because we have a legitimate interest in analysing and optimising our online offering. We use this analysis to improve our website and to provide the user with a constantly improved browsing experience, which equally serves our economic interests and constitutes our legitimate interest.

5. Duration of storage


The data we transmit to Google, including the data linked to cookies, is automatically deleted after 14 months. Once the retention period has expired, the data will be deleted automatically once a month.

6. Objection and deletion options


You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by clicking on the link below (

http://tools.google.com/dlpage/gaoptout?hl=de

) and installing the browser plug-in.

You can prevent data collection by Google Analytics by clicking on the following link. This will set an opt-out cookie, which will prevent the collection of your data during your visit to the website in the future.

Deactivating Google Analytics

This website has been extended by Google Analytics with the code "anonymizeIP". This extension shortens IP addresses before a possible transfer to the USA in order to ensure anonymisation.

Further information on the terms of use and data protection of Google Analytics can be found at

http://www.google.com/analytics/terms/de.html

or at

https://www.google.de/intl/de/policies/

.

7. Recipients of personal data


The IP address and usage data are processed by on behalf of Google on the basis of a commissioned processing agreement pursuant to Article 28 para. 2, para. 3, para.4 GDPR.

Google has joined the US privacy shield, this can be verified under the following link:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

 

XI. reCaptcha

1. Description and scope of data processing


To make it impossible for robots to make entries in online forms, we use functions ("reCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find Google's privacy policy here:

www.google.com/policies/privacy/

To use the functions of reCaptcha, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence on the transmission of this data.

The use of reCaptcha serves to prevent misuse of our website, in particular of the online forms. In addition, this is to ensure that our online offer can be accessed at any time and is not impaired by a targeted overload through the use of robots.

You can find more information on the handling of user data in Google's privacy policy:

www.google.de/intl/de/policies/privacy/

.

2. Legal basis for data processing


The legal basis for data processing is Article 6 para. 1 lit. f) GDPR

3. Purpose of the data processing


The data processing serves to prevent misuse and overloading of our online offer by robots.

4. Legitimate interest


Our legitimate interest in data processing stems from the need to enable trouble-free operation of our online services and to prevent misuse.

5. Duration of storage


The duration of the storage of the data by Google can be found in the data protection information:

www.google.com/policies/privacy/

6. Objection and deletion options


Google offers an opt-out option, whereby you can object to data processing. The opt-out cookie is set by clicking on the following link:

https://adssettings.google.com/authenticated

.

7. Recipients of personal data


The IP address and usage data are processed by Google.

Google has joined the US privacy shield, this can be verified under the following link:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

 

XII. Google Maps

1. Description and scope of data processing


This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

Google Maps is used in the interest of an appealing presentation of our online offers and to ensure that the places we indicate on the website are easy to find. This represents a legitimate interest within the meaning of Article 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google's privacy policy:

www.google.de/intl/de/policies/privacy/

.

2. Legal basis for data processing


The legal basis for data processing is Article 6 para. 1 lit. f) GDPR

3. Purpose of the data processing


Data processing serves the purpose of enabling an appealing presentation of our online offering.

4. Legitimate interest


Our legitimate interest for data processing results from the intention to offer an appealing online offer and to provide you with appealing content on our websites.

5. Recipients of personal data


The IP address and usage data are processed by Google.

Google has joined the US privacy shield, this can be verified under the following link:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

 

XIII. Social Media

All social media functionalities (Facebook, YouTube, LinkedIn, etc) on our website and all links to social media portals are provided by Rhenus SE & Co. KG.

The Rhenus :people! Bamberg GmbH is not responsible for these social media integrations in the sense of data protection laws.

The data protection information of Rhenus SE & Co. KG can be found at www.rhenus.group/de/datenschutz-richtlinie/.

 

XIV. Rights of the data subject

If personal data is processed by you, you are the data subject within the meaning of the General Data Protection Regulation. Therefore, you have the following rights against the controller.

To exercise your data subject rights against us as the controller, please contact us at the following email address:

dsb.people@rdp-law.de

 

1. Right to information – Article 15 GDPR

You are entitled to request confirmation from the controller as to whether personal data relating to you is being processed.

If such processing takes place, you have the right to obtain information about this personal data and the following information:

  • The purposes for which the personal data is processed;
  • the categories of personal data being processed;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • Where possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining the storage period;
  • the existence of a right to rectify or erase the personal data concerning you, a right to restrict processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • any available information on the origin of the data if the personal data are not collected from the data subject;
  • the existence of automated decision-making processes, including profiling pursuant to Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information concerning the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, you have the right to request information about whether your personal data is transferred to a third country or to an international organisation. In this context, you may also request that you be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transmission of the data.

 

2. Right to rectification – Article 16 GDPR

You have the right to demand from the controller the rectification and/or completion of the data concerning you without undue delay, if the personal data processed are inaccurate or incomplete.

 

3. Right to erasure – Article 17 GDPR

Obligation to erase:

You have the right to request the immediate erasure of your personal data at any time, provided that one of the following reasons applies:

  • your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you have withdrawn your consent on which the processing was based pursuant to Article 6 para. 1 lit. a) or Article 9 para. 2 lit. a) GDPR and there is no other legal basis for the processing;
  • you have objected to the processing pursuant to Article 21 para. 1 and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Article 21 para. 2 GDPR;
  • your personal data has been processed unlawfully;
  • the erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
  • your personal data has been collected with respect to information society services offered pursuant to Article 8 para. 1 GDPR.

Exceptions:


The right to erasure does not apply insofar as processing is necessary

to exercise the right to freedom of expression and information;


for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;


for reasons of public interest in the area of public health pursuant to Article 9 para. 2 lit. h and i and Article 9 para. 3;


for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89


(1) of the GDPR, insofar as the right referred to in section (a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or


for the assertion, exercise or defence of legal claims.

 

4. Right to restriction of processing – Article 18 GDPR

You are entitled to request the restriction of your personal data under the following conditions:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • if the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of your personal data;
  • if the controller no longer requires your personal data for the purposes of processing, but you need them for the assertion, exercise or defence of legal claims, or
  • if you have objected to the processing of your data pursuant to Article 21 para. 1 GDPR and it has not yet been confirmed whether the legitimate grounds of the controller outweigh your grounds.

If the processing of your personal data has been restricted, this data - apart from storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

In the event that the restriction of processing has been restricted on the basis of the aforementioned conditions, the controller shall inform you before the restriction is lifted.

 

5. Right to information – Article 19 GDPR

If you have exercised one of your rights to rectification, erasure or restriction of processing, we are under the obligation to inform all recipients to whom the personal data relating to you has been disclosed of the rectification, erasure of the data or restriction of processing, unless this would prove impossible or would involve a disproportionate amount of effort.

You also have the right to be informed about these recipients.

 

6. Right to data portability – Article 20 GDPR

You have the right to receive your personal data that you have provided to the controller in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance by the controller to whom the personal data was provided, provided that

a) the processing is based on consent pursuant to Article 6 para. 1 lit. a) GDPR or Article 9 para. 2 lit. a) GDPR or on a contract pursuant to Article 6 para. 1 lit. b) GDPR and

b) the processing is carried out with the aid of automated procedures.

In exercising this right to data portability, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible.

 

7. Right of objection – Article 21 GDPR

You are entitled to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Article 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

 

8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

 

9. Right to lodge a complaint to a supervisory authority – Article 77 GDPR

Without prejudice to any other administrative or judicial remedy, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which you lodge a complaint shall inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.


This data protection notice will be updated at regular intervals.