Privacy

The following privacy policy applies to the use of our online offer [www.isrr-gmbh.de, www.industrie-service-rhein-ruhr.de, www.isrr-gmbh.com] (hereinafter referred to as "Website"). We attach great importance to privacy. The collection and processing of your personal data is in strict compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

 

1 Data controller

 

The data controller for the collection, processing and use of your personal data in the sense of art. 4 No. 7 GDPR is

 

Dr.-Ing. Rudolf Staude · Hülsermannshof 9A · 47179 Duisburg

Phone: 0203-4 85 51-0 · Telefax: 0203-4 85 51-51 · info(at)isrr-gmbh.de

 

If you wish to object to the collection, processing or use of your data by us pursuant to this Privacy Policy as a whole or for individual activities, you can address your objection to the person responsible. You can save and print this privacy policy at any time.

 

2 General purposes of processing

 

We use personal data for the purpose of operating the website and for the Industrie Service Rhein-Ruhr.

 

3 What data do we use and why

 

3.1 Hosting

 

The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, disk space and database services, security services, as well as technical maintenance services that we use to operate the site. For this purpose, we or our hosting provider processes inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in an efficient and secure provision of our website pursuant to art. 6 para. 1 s.1 f) DSGVO in conjunction with art. 28 GDPR.

 

3.2 Access data

 

We collect information about you when you use this website. We automatically collect information about your usage behaviour and interaction with us and register information about your computer or mobile device. We collect, store and use data about every access to our website (so-called server log files). Access data includes:

−  Name and URL of the file retrieved

−  Date and time of retrieval

−  Transferred amount of data

−  Message about successful retrieval (HTTP response code)

−  Browser type and browser version

−  Operating system

−  Referer URL (i.e. the previously visited page)

−  Websites that are accessed by the user's system through our website

−  Internet service provider of the user

−  IP address and the requesting provider

We use this log data without assignment to you or other profiling for statistical analysis for the purpose of operation, security and optimization of our website, but also for the anonymous recording of the number of visitors to our website (traffic) and the scope and nature of use of our website and services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. This information enables us to provide personalized and location-based contents, analyse traffic, troubleshoot and improve our services.

This is also our legitimate interest pursuant to art. 6 para 1 p. 1 f) GDPR. We reserve the right to check the log data subsequently if, due to concrete evidence, there is justified suspicion of unlawful use. We store IP addresses in the log files for a limited period if necessary for security purposes or for the provision of services or the billing of a service, e.g. if you use one of our offers. After termination of the order process or after receipt of payment, we will delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a crime in connection with the use of our website. In addition, we save the date of your last visit as part of your account,(e.g. when registering, logging in, clicking links, etc.).

 

3.3 Cookies

 

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when visiting a website and stored on your hard disk. This file contains a so-called session ID, allowing that various requests from your browser can be assigned to the shared session. So, your computer will be recognized when you return to our website. These cookies will be deleted after you close your browser. For example, they allow you to use the shopping cart feature across multiple pages.

We also use a small amount of persistent cookies (also small text files stored on your device) that remain on your terminal device and allow us to recognize your browser on your next visit. These cookies will be stored on your hard disk

and delete themselves after the given time. Their lifetime is 1 month to 10 years. In this way, we can present our offer in a more user-friendly, effective and secure way and, for example, show you information tailored to your interests on our website.

Our legitimate interest in the use of cookies pursuant to art. 6 para. 1 .1 f) GDPR is to make our website more user-friendly, effective and secure.

The following information and data are stored in the cookies:

- Log-in information

- Language settings

- Entered search terms

- Information on the number of visits to our website and use of individual features of our website.

When the cookie is enabled, it will be assigned an identification number and no assignment of your personal data to this identification number will be made. Your name, IP address or similar data that would allow the cookie to be associated with you will not be inserted into the cookie. Based on the cookie technology, we only receive pseudonymous information, for example, which pages of our shop were visited, which products were viewed, etc.

You can set your browser so that you are informed in advance about the setting of cookies and you can decide on a case-by-case basis whether you exclude the acceptance of cookies for specific cases or in general, or that cookies are completely prevented. This will however

restrict the functionality of the website.

 

3.4 Data for fulfilment of our contractual obligations

 

We process personal data that we need to fulfil our contractual obligations, such as name, address, e-mail address, ordered products, billing and payment data. The collection of this data is required for the conclusion of the contract.

The data will be deleted after expiry of the warranty periods and legal retention periods. Any data associated with a user account (see below) will in any case be retained for the time this account is maintained. The legal basis for the processing of this data is art. 6 para 1 s. 1 b) GDPR as we need this data to fulfil our contractual obligations towards you.

 

3.5 User account

 

You can create a user account on our website. In this case, we need the personal data requested during login. The following logins will only require your e-mail or user name and the password you have chosen. For the new registration we collect master data (e.g. name, address), communication data (e.g. e-mail address) and payment data (bank details) as well as access data (user name and password).

In order to ensure your proper registration and to prevent unauthorized log-ins by third parties, you will receive an activation link by e-mail after your registration in order to activate your account. Only after registration, we permanently store the data transmitted by you in our system. You can have a user account created deleted from us at any time, without incurring any costs other than the transmission costs according to the basic rates. A text message to the contact data referred to in point 1 (e.g. e-mail, fax, letter) is sufficient. We will then delete your stored personal data, as far as we do not have to store them for the processing of orders or due to legal storage obligations.

The legal basis for the processing of this data is your consent pursuant to art. 6 para 1, s. 1 a) GDPR.

 

3.6 Newsletter

 

The data requested in the registration process is required to register for the newsletter. The registration for the newsletter will be logged. After registering, you will receive a message on the specified e-mail address requesting confirmation of your registration ("Double Opt-in"). This is necessary to prevent third parties from registering with your e-mail address. You can always revoke your consent to receive the newsletter and thus unsubscribe from the newsletter.

We store the log-in details as long as they are needed for sending the newsletter. The logging of the registration and the shipping address are stored as long as there was an interest in the proof of the originally given consent, as a rule these are the limitation periods for civil claims, thus a maximum of three years.

Legal basis for sending the newsletter is your consent acc. to art. 6 para. 1 s. 1 a) in conjunction with art. 7 GDPR in conjunction with § 7 para 2 no. 3 UWG. Legal basis for logging the registration is our legitimate interest in proving that the sending was made with your consent.

You can cancel your registration at any time, without incurring any costs other than the transmission costs according to the basic rates. A text message to the contact data referred to in point 1 (e.g. e-mail, fax, letter) is sufficient. Of course, you will also find an unsubscription link in every newsletter.

 

3.7 Product recommendations

 

Regardless of the newsletter, we will send you regular product recommendations by e-mail. In this way, we will provide you with information about products from our range of products that you may be interested in based on your recent purchases of goods or services from us. We comply strictly with the legal requirements. You can withdraw your consent at any time, without incurring any costs other than the transmission costs according to the basic rates. A text message to the contact data referred to in point 1 (e.g. e-mail, fax, letter) is sufficient. Of course, you will also find an unsubscription link in every e-mail.

The legal basis for this is the statutory permission pursuant to art. 6 para 1 s. 1f)e 1 f) GDPR in conjunction with § 7 para 3 UWG.

 

3.8 E-Mail Kontakt

 

If you contact us (e.g. via contact form or by e-mail), we will process your details for the processing of your request as well as for the case that follow-up questions arise. If the data processing takes place for the execution of pre-contractual measures, which take place upon your

request, or, if you are already our customer, for the execution of the contract, the legal basis for this data processing is art. 6 para. 1 s. 1 b) GDPR . We process further personal data only if you consent to it (art. 6 para 1 s. 1 a) GDPR) or we have a legitimate interest in the processing of your data (art. 6 para 1 s. 1f) GDPR). A legitimate interest is e.g. to reply to your e-mail.

 

4 Google Analytics

 

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated

by the cookie about the use of this website by the site visitors are usually transmitted to a Google server in the USA and stored there. This is also our legitimate interest pursuant to art. 6 para 1 p. 1 f) GDPR. Google has submitted to the Privacy Shield Agreement between the European Union and the United States and has been certified. As a result, Google undertakes to observe the standards and

regulations of the European data protection legislation. For further information, please refer to the linked entry below:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated IP anonymization on this website (anonymizeIp). As a result, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in certain exceptional cases, the full IP address will be sent to a Google server in the US and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage.

The IP address provided by your browser as part of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full.

In addition, you may prevent the transmission to Google of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this

browser and only for this domain. You must click this link again to delete the cookies in your browser: [Disable Google Analytics]

Note for the responsible person (is not part of the privacy statement!):

The cookie provided by Google for disabling the browser plug-in does not work on mobile devices. But even there, the person affected must have the opportunity to prevent the collection of their IP address. Therefore, a special Javascript must be included with the following code (the "xxxxxxx" standing for the Analytics ID):

<script>

var gaProperty = 'UA-xxxxxxx-1';

var disableStr = 'ga-disable-' + gaProperty;

if (document.cookie.indexOf(disableStr + '=true') > -1) { window[disableStr] = true;}

function gaOptout() {

document.cookie = disableStr + '=true; expires=Thu, 31 Dec 2099 23:59:59 UTC; path=/';

window[disableStr] = true; }

</script>

The link will then be included in the privacy policy at the yellow marked point as follows (the

link text between ">" and "<" being freely selectable:

<a href=“javascript:gaOptout()“>Disable Google Analytics</a>

The line

ga('set', 'anonymizeIp', true);

will be added to the anonymizeIP function as follows:

<script>

(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){

(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),

m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)

})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

ga('create', 'UA-XXXXXXXX-X', 'auto');

ga('require', 'displayfeatures');

ga('require', 'linkid', 'linkid.js');

ga('set', 'anonymizeIp', true);

ga('send', 'pageview');

</script>

 

5 Storage period

 

Unless specifically stated, we store personal data only as long as necessary to fulfil the purposes pursued. In some cases, the legislator provides for the retention of personal data, e.g. in tax or commercial law. In these cases, the data will be stored by us only for these legal purposes, but not otherwise processed and after expiration of the

legal retention period deleted.

 

6 Your rights as individual concerned by data processing

 

Under applicable law, you have various rights regarding your personal data. If you would like to assert these rights, please send your request by e-mail or by post with a clear identification of your person to the address indicated in

paragraph 1. Below is an overview of your rights.

 

6.1 Right to confirmation and information

 

You have the right to clear information about the processing of your personal data.

In detail:

You have the right at any time to obtain confirmation from us as to whether personal data relating to you are being processed. If this is the case, you have the right to request from us free information about your stored personal data as well as a copy of this data. Furthermore, you have a right to the following information:

1. the processing purposes;

2. the categories of personal data being processed;

3. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;

4. if possible, the planned period of storage of the personal data or, if this is not possible, the criteria for determining this duration;

5. the existence of a right to rectify or erase your personal data or to restrict processing by the person responsible or a right to object to such processing;

6. the existence of a right of appeal to a supervisory authority;

7. if the personal data is not collected from you, all available information about the origin of the data;

8. the existence of automated decision-making including profiling pursuant to art. 22 para 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved, as well as the consequences and intended effects of such processing for you. If personal data are transmitted to a third country or to an international organization, you have the right to be informed about the appropriate guarantees pursuant to art. 46 GDPR in connection with the transmission.

 

6.2 Right to correction

 

You have the right to request the correction and, if necessary, the completion of personal data.

In detail:

You have the right to request the immediate correction of inaccurate personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, also by means of a supplementary statement.

 

6.2 Right of deletion ("Right to be forgotten")

 

In a number of cases, we are required to delete your personal data.

In detail:

Pursuant to art. 17 para 1 GDPR, you have the right to request that your personal data are deleted without delay and we are obliged to delete your personal data immediately, if one of the following reasons applies:

1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

2. You revoke your consent, on which the processing was based pursuant to art. 6 para 1 s. 1 a) GDPR or art. 9 para 2 a) GDPR, and there is no other legal basis for the processing.

3. Pursuant to art. 21 para 1 GDPR, you object to the processing and there are no legitimate reasons for the processing, or you object to the processing pursuant to art. 21 para 2 GDPR.

4. The personal data was processed unlawfully.

5. The deletion of personal data is required to fulfil a legal obligation under EU law or national law which we are subject to.

6. The personal data were collected in relation to information society services offered pursuant to art. 8 para 1 GDPR. If we have made public the personal data and if we are obliged to delete it pursuant to art. 17 para 1 GDPR, we shall take appropriate measures, including technical ones, taking into account the available technology and implementation costs, to inform data controllers who are responsible for personal data processing that you have requested the deletion of any links to such personal data or copies or replications of such personal data.

 

6.4 Right to restriction of processing

 

In a number of cases, you may request that we restrict the processing of your personal data.

In detail:

You have the right to request us to restrict processing if one of the following conditions applies:

1. The accuracy of your personal data is contested by you for a period of time that enables us to verify the accuracy of your personal data.

2. The processing is unlawful and you have objected to the deletion of personal data and have instead requested the restriction of the use of your personal data;

3. We no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend your rights, or

4. You have objected to the processing pursuant to art. 21 para 1 GDPR, as long as it is not certain that the justified reasons of our company outweigh yours.

 

6.5 Right portability

 

You have the right to receive, transmit or have transmitted by us your personal data in a machine-readable way.

In detail:

You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another data controller without our hindrance, provided that

1. Processing is based on a consent pursuant to art. 6 para 1 s. 1 a) GDPR or art. 9 para 2

a) GDPR or on a contract pursuant to art. 6 para. 1 s. 1 b) GDPR; and

2. Processing is done using automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to obtain that your personal data are transmitted directly by us to another data controller, as far as technically feasible.

 

6.6 Right of objection

 

You have the right to object to the lawful processing of your personal data by us if this is based on your particular situation and, if our interests in processing do not prevail.

In detail:

For reasons arising from your particular situation, you have at any time the right to object to the processing of your personal data pursuant to art. 6 para 1 s. 1 e) or f) GDPR; this also applies to profiling based on these provisions. We no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

If your personal data are processed by us for direct mail, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

For reasons arising from your particular situation, you have the right to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes pursuant to art. 89 para 1 GDPR, unless processing is necessary to fulfil a task of public interest.

 

6.7 Automated decisions including profiling

 

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or will affect you considerably in a similar manner. There is no automated decision-making based on your personal data collected.

 

6.8 Right to revoke a data protection consent

 

You have the right to revoke your consent to the processing of your personal data at any time.

 

6.9 Right to complain to a supervisory authority

 

You have the right to complain to a supervisory authority, in particular in the Member State of your residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is unlawful.

 

7 Data security

 

We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.

Your personal data is transmitted in encrypted form by us. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (e.g. when communicating via e-mail) can have security gaps. It is not possible to protect such data completely against access by third parties. To safeguard your data, we maintain technical and organisational protection measures pursuant to art. 32 GDPR, which we always adapt to state-of-the-art technology. We also do not warrant that our offer will be available at specific times; disturbances, interruptions or failures can not be excluded. The servers we use are regularly backed up carefully.

 

8 Disclosure of data to third parties, no data transfer to non-EU countries

 

Basically, we only use your personal data within our company. If and insofar as we engage third parties in the performance of contracts (such as logistics service providers), they will only receive your personal data to the extent that the

transmission is required for the appropriate performance. In the event that we outsource certain parts of data processing ("order processing"), we require the order processors to contractually undertake to process personal data only pursuant to the requirements of data protection laws and to ensure the protection of the data of the person concerned. Data transmission to agencies or persons outside the EU apart from the case referred to in para 4 does not take place and is not planned.

 

9 YouTube

 

We use YouTube in our website. It is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, hereinafter referred to as "YouTube."

YouTube is a subsidiary of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."

Certified under the EU-US Privacy Shield,

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google and thus the subsidiary YouTube guarantee that the data protection requirements of the EU are also observed when processing data in the USA.

We use YouTube in conjunction with the Enhanced Data Protection Mode feature to show you videos. Legal basis is art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improving the quality of our website. According to YouTube, the Enhanced Data Protection Mode feature means that the data specified below in detail is not transmitted to YouTube's server unless you actually start a video.

Without this "Enhanced Data Protection," you will be connected to the YouTube server in the United States as soon as you visit one of our web pages that embed a YouTube video.

This connection is required to be able to display the respective video on our website via your Internet browser. As a result, YouTube will at least collect and process your IP address, the date and time as well as the website you are visiting. A connection to Google's DoubleClick ad network is also established.

If you're logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality as well as for the analysis of the usage behavior, YouTube permanently stores cookies on your device via your internet browser. If you do not agree with this processing, you have the option to prevent cookies from being stored by a setting in your Internet browser. For more information, see "Cookies" above.

Further information about the collection and use of data as well as your related rights and protection options are provided by Google in the available data protection information at

https://policies.google.com/privacy

 

10 Data Protection Officer

 

If you have any questions or concerns about data protection, please contact our data protection officer:

 

Dr.-Ing. Rudolf Staude · Hülsermannshof 9a · 47179 Duisburg

 

Phone: 0203-4 85 51-0 · Telefax: 0203-4 85 51-51 · info@isrr-gmbh.de

 

ISRR  Industrie Service Rhein-Ruhr GmbH

Hülsermannshof 9A · D-47179 Duisburg

Phone: +49 203-4 85 51-0 · Fax: +49 203-4 85 51-51 · info(at)isrr-gmbh.de