Data protection policy

Responsible for data processing

Rhebo GmbH
Hall 6, 2nd Floor
Spinnereistr. 7
04179 Leipzig, Germany
Tel. +49-341-3937900

contact.compliance@rhebo.com

Data protection

It is generally possible to use our website without providing any personal information. The collection of personal data (e.g. name, address or email addresses) on our website is, if possible, always voluntary.

We wish to point out that transferring data over the internet (e.g. when communicating via email) can pose security risks. It is not possible to completely protect the data from third-party access.

Lawfulness of data processing

Processing operations on the website of our company done to protect the legitimate interests of management is deemed lawful under Article 6 (1f) of the General Data Protection Regulation (GDPR). As permitted under this provision, this website collects server log files and uses cookies as well as third-party web analytics services. Detailed information on the processing operations on our website is provided in the relevant process descriptions of this data privacy policy.

In addition, Article 6 (1c) allows for data processing for the purpose of fulfilling the legal obligations of our company (e.g. tax obligations).

Server log files

The provider of these pages collects and automatically stores information in so-called server log files that your browser automatically transmits to us. This information includes:

  • Browser type/browser version
  • Operating system being used
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request

This data cannot be associated with specific persons. This data is not combined with other data sources. We reserve the right to check this data at a later date if we become aware of specific evidence of illegal use.

Cookies

These web pages use ‘cookies’ in certain cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies help to make our services more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and are stored by your browser.

We categorize the cookies used on our website as follows:

  • Type 1: Mandatory cookies: These cookies help make a website usable. They enable basic functions such as page navigation. The website will not work properly without them. 
  • Type 2: Performance cookies: These cookies collect information on how our websites are used, e.g. number of visits, average session time, accessed pages. These cookies do not store any information that can be used to identify a user. The information collected with the help of these cookies is aggregated and therefore anonymous. Performance cookies improve the usability and user experience of a website. You can block the use of such cookies by creating an exclusion cookie (see “Google Analytics” and “Google Adwords”).

The following cookies are used by our website:

  • PHPSESSID: Used to identify a returning user. It is a session cookie that will be deleted when you leave the site. (Type 1)
  • ACCEPT_COOKIE: Indicates that you consent to the use of cookies on our site. To avoid constantly asking you for consent, this cookie is stored for 90 days. (Type 2)
  • _gid: Assigns the user a unique ID that is used to generate statistical data for Google Analytics. It collects data on how visitors use the website (session time, visited pages, etc.). As a session cookie, it will be deleted when you leave the site. (Type 2)
  • _gat: Used by Google Analytics to throttle the request rate. It is a session cookie that will be deleted when you leave the site. (Type 2)
  • collect: Used by Google Analytics to track certain user activities on the site via a “tracking pixel”.
    It is a session cookie that will be deleted when you leave the site. (Type 2)
  • _ga: Assigns each user a unique ID to distinguish them from each other and record repeat visits. To enable continuous tracking of returning visitors, this cookie is stored for 2 years. (Type 2)

You can modify your browser settings to notify you when cookies are set, allow cookies for only one session, accept cookies in specific cases, block cookies or automatically delete cookies when you close your browser. Disabling cookies can limit the functionality of this website. For more information on how to configure the settings, use the help function in your browser.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). Use includes the “Universal Analytics” code, which allows the pseudonymous assignment of a user ID to analyze user data, sessions and activities over multiple devices. This data privacy policy is provided by https://www.intersoft-consulting.de

Google Analytics uses “cookies”, text files which are stored on your computer and enable analysis of how you use of the website. The information generated by the cookie about your use of this website is normally transmitted to a Google server in the United States and stored there. If IP anonymization is activated on this website, Google will abbreviate your IP address within Member States of the European Union or other states party to the European Economic Area Agreement. Only in exceptional cases will your full IP address be transferred to a Google server in the United States and abbreviated there. The IP address transferred from your browser as part of Google Analytics will not be merged with other Google data. Google will, on behalf of the operator of this website, use this information to analyze your use of the website, compile reports about website activities and provide further services related to website activity and internet usage to the website operator. These purposes also serve our legitimate interests in data processing. The legal basis for the use of Google Analytics is provided for under Section 15(3) of the German Telemedia Act and Article 6 (1f) of the GDPR. Sessions and campaigns will end after a specific time period lapses. By default, sessions will end after 30 minutes without activity and campaigns will end after six months. The maximum time limit for campaigns is two years. For more information on terms of use and data privacy, refer to https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de

You can prevent cookies from being stored via your browser settings. Note that you may not be able to use all the functions on this website if you do. Additionally you can prevent the cookie-generated data concerning your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing this browser add-on. Opt-out cookies prevent your data from being collected while visiting this website. To prevent Universal Analytics from collecting data over multiple devices, you need to “opt out” on all the systems you use. To set the opt-out cookie, click here: Disable Google Analytics.

Use of Google AdWords

This website also uses functions provided by the online web service Google AdWords, including conversion tracking. Google AdWords is a web analytics service of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Conversion tracking uses cookies that will be stored on your device when you click a Google sponsored ad. These cookies expire after 30 days and do not contain personal data. It does not allow the personal identification of the user. While the cookie is active, Google and the website operator can see when a user clicks the ad and is sent to this site.

Conversion statistics for AdWords customers contain the total number of users who have clicked an ad and were sent to a site that has a conversion tracking tag. The cookies of each AdWords customer are different, which means they cannot be tracked via the websites of AdWords customers. The cookie placement necessary for conversion tracking can be switched off using the browser setting that disables automatic acceptance of cookies or by blocking cookies from the googleadservices.com domain.

More information on this topic and Google’s data privacy policy can be found at: http://www.google.com/policies/technologies/adshttp://www.google.de/policies/privacy/.

Opting out of data collection

You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will then be stored that prevents the collection of your data during future visits to this website: Disable Google Analytics.

Browser plug-in

You can prevent cookies being stored by setting your browser software accordingly; however, we wish to point out that in this case you may not be able to use all functions on this website in full. You can also prevent the data generated by the cookie about your use of the website (including your IP address) from being sent to or processed by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

IP anonymization

We use the “Activation of IP anonymization” function on this site. With this function, your IP address will first be truncated by Google in member states of the European Union or in other signatory states to the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and truncated there. At the request of the operator of this website, Google uses this information to evaluate your use of the website, compile reports on website activities and provide other services related to website use and internet use for the website operator. The IP address transferred from your browser within the scope of Google Analytics is not associated with other data by Google.

Use of LinkedIn

Our website uses functions of the LinkedIn network. The provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. A connection to LinkedIn’s servers is established every time one of our pages is accessed that contains LinkedIn functions. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button and are logged in to your LinkedIn account, LinkedIn will be able to associate your visit to our website with you and your user account. We wish to point out that we as the provider of these pages have no knowledge of the content of the data transmitted or of the use of this data by LinkedIn. You can find further information in this regard in the LinkedIn Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

Use of Twitter

Functions of the Twitter service are included in our pages. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. If you use Twitter and the “Retweet” function, the websites that you visit will be linked with your Twitter account and other users will be made aware of them. Data is also transmitted to Twitter in this case. We wish to point out that we as the provider of these pages obtain no knowledge of the content of the data transmitted or of the use of this data by Twitter. You can find further information in this regard in the Twitter Privacy Policy at http://twitter.com/privacy.

You can change your Twitter security and privacy settings in your account settings at http://twitter.com/account/settings.

Use of Xing

Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. A connection to Xing’s servers is established every time one of our pages is accessed that contains Xing functions. As far as we are aware, personal data is not stored in this case. In particular, no IP addresses are stored and user behavior is not evaluated.

You can find further information on data protection and the Xing share button in the Xing privacy policy at https://www.xing.com/app/share?op=data_protection

Use of YouTube

Our website uses plug-ins from the website YouTube, which is run by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages that is equipped with a YouTube plug-in, a connection to YouTube’s servers is established. The YouTube server is then told which of our pages you visited.

If you are logged in to your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

You can find further information on the use of user data in the YouTube privacy policy at https://www.google.de/intl/de/policies/privacy

Contact form

If you wish to submit inquiries to us using our contact form, the data you provide in the inquiry form—including the contact data you specify there—will be processed by us for the purpose of processing your inquiry and for follow-up questions. We will not pass on this data without your consent.

We will process your personal data in accordance with the data privacy-relevant provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws.

Your data will be used to process your requests regarding the implementation of commercial and pre-contractual measures, the fulfillment of a contract or the safeguarding of our legitimate interests or those of a third party. The legal basis for such processing is provided for under Articles 6(1b) and 6(1f) of the GDPR.

Our legitimate interests in data processing lies in processing your requests insofar as they do not involve the implementation of pre-contractual measures or fulfillment of a contract. This processing does not conflict with your legitimate interests, basic rights or fundamental freedoms since the data is provided of your own free will and your rights are protected.

We will also process your personal data to fulfill legal obligations such as regulatory requirements and commercial and tax law retention requirements. The legal basis for this is provided by the relevant statutory regulations connected with Article 6(1c) of the GDPR.

If we wish to process your personal data for a purpose not mentioned above, we will notify you in advance in accordance with legal provisions.

Newsletter data

If you wish to receive the newsletter that is offered on this website, we require from you an email address as well as information that allows us to check that you are the owner of the email address provided and that you agree to receive the newsletter. After you send your data you will receive another email prompting you once again to consent to the use of your data. No other data is collected. We will only use this data to send the requested information. Your data will be processed for the purpose of sending you advertising and product information by email in accordance with your consent. The legal basis for this processing is provided for under Article 6(1a) of the GDPR.

We will also process your personal data to fulfill legal obligations such as regulatory requirements and commercial and tax law retention requirements. The legal basis for this is provided by the relevant statutory regulations connected with Article 6(1c) of the GDPR.

If we wish to process your personal data for a purpose not mentioned above, we will notify you in advance in accordance with legal provisions.

You can revoke at any time the consent you provided to the storage of data, your email address and its use to send the newsletter—for example, by using the “Unsubscribe” link in the newsletter.

Downloads

We allow you to access (download) files and information from our website, but note that as the user you are responsible for any and all risks associated with the proper transfer, use and storage of downloaded data. Liability for damage from using the files and information, either directly or indirectly, is excluded. Liability for intent and gross negligence remains unaffected.

To download the materials offered on our website, you must first complete a form with personal data. Your data will be processed for the purpose of sending you advertising and product information by email in accordance with your consent. The legal basis for this processing is provided for under Article 6(1a) of the GDPR.

We will also process your personal data to fulfill legal obligations such as regulatory requirements and commercial and tax law retention requirements. The legal basis for this is provided by the relevant statutory regulations connected with Article 6(1c) of the GDPR.

If we wish to process your personal data for a purpose not mentioned above, we will notify you in advance in accordance with legal provisions.

Advertising under Section 7(3) of the German Unfair Competition Act (UWG)

Your email address is included in the information you provide us in the course of concluding a contract. Under the statutory authorization provided under Section 7(3) of the UWG, we are entitled to use this information for direct advertising and would like to send you our product recommendations, which will inform you of our offers on a regular basis, provided you have not refused to having your email address sent for this purpose.

You may refuse the use of your data for such purposes at any time (i.e. unsubscribe from the product recommendations) without incurring any costs other than the data transmission costs at the base rate. You can also refuse this processing and use of data by clicking the “Unsubscribe” link included in each email or sending an email to that effect to contact.compliance@rhebo.com and you will no longer receive the product recommendations. 

Categories of recipients of personal data

Where necessary and for the purpose of service provision as permitted under Articles 6(2) and 28 if the GDPR, your personal data will be transmitted to the following categories of recipients.

IT data centers (provide information and telecommunication services)

File and data media shredders (properly disposes of files and data media)

Email distributors (provide capacity for sending emails)

Service providers (business service providers)

Dispatch service providers (deliver documents)

Advertising service providers (provide targeted advertising)

In addition, we may transfer your personal information to other categories of recipients such as public authorities to fulfill legal reporting obligations (e.g. social security agencies, tax and social welfare authorities, law enforcement agencies, courts).

Duration of data storage

We will delete your personal data once they are no longer required for the aforementioned purposes. Deletion normally occurs once your revoke your consent or in the event the email notice fails to deliver for technical reasons.

It may occur that personal data is kept during the time in which claims are asserted against our company.

Rights of persons affected

Under the above address you can request information regarding your stored personal data. You can also request corrections under certain conditions or the deletion of your data. You retain the right to restrict the processing of your data and to publish or transfer the data you provide in a structured, standard and machine-readable format.

You also have a right to refuse the processing of your personal data.

You have the right to file a complaint with the data protection authorities.

Revoking consent

Insofar as the processing is based on Art. 6 (1a) of the GDPR, you can revoke your consent at any time without affecting the legality of the processing done after consent and until revocation.

Data provision

The provision of your data is not legally or contractually prescribed. You are not required to provide your personal data. Failure to provide your data, however, means you will not receive ads or product information 

Disclaimer and right of modification

We have compiled all the information and components of this website to the best of our knowledge and belief. Nevertheless we are not liable for the completeness, accuracy, timeliness and technical security of the information provided on this website.
Note that the website or parts thereof may be modified, supplemented or deleted without prior notice. Publication can also be terminated, either temporarily or permanently, without prior notice.

In case of doubts about the accuracy of our data protection policy, the German version is the only applicable for jurisdiction. 

Last updated: 05/23/2018