Privacy Policy

In the following, we inform you about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

I. Name and address of the person responsible and contact details of the data protection officer

1. responsible person

The person responsible within the meaning of the EU General Data Protection Regulation (DS-GVO) and other national data protection laws of the member states as well as other data protection regulations is:

RIS Facility Management GmbH RIS-BG Environmental GmbHErlen 4Kelterplatz 1075031 Eppingen71549 AuenwaldGermanyManaging Directors: Mehmet Tiftikci, Bülent Gül, Dr. Stefan BerbnerManaging Directors: Mehmet Tiftikci, Bülent Gül, Dr. Stefan BerbnerPhone: +49 7262 / 208815Phone: +49 7191 / 903 1020E-mail: info@ris-bg-environmental.deE-mail: info@ris-bg-environmental.deUSt-IdNr.: DE296503613USt-IdNr.: DE300794877HRB 750196HRB 753177

2. contact details of the data protection officer

You can reach our data protection officer at the e-mail address datenschutz@aafeurope.com or at the postal address with the addition "The data protection officer".

II. general information on data processing

1 Scope of the processing of personal data

As a matter of principle, we process personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.

2 Legal basis for the processing of personal data

a) Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO)

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a EU Data Protection Regulation (DSGVO) serves as the legal basis.

b) Contract performance and pre-contractual enquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO).

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

c) Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO)

Insofar as processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

d) Protection of vital interests (Art. 6 para. 1 p. 1 lit. d. DSGVO)

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.

e) Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO)

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

In addition to the GDPR, there is national law, such as the Federal Data Protection Act (BDSG), which may contain special regulations. 3.

3 Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

III. Security measures

In order to ensure an appropriate level of protection, technical and organisational measures are taken in accordance with the legal requirements, taking into account the following criteria in particular:

1) State of the art

2) implementation costs

3) Type, scope and purpose of the processing

4) probability of occurrence and extent of the threat to the rights and freedoms of natural persons.

In addition, when selecting measures, particular emphasis is placed on ensuring the confidentiality, integrity and availability of data.

For example, SSL encryption is used to protect the transmitted data during data exchange. You can recognise this on the one hand by "https://" in the URL and on the other hand by the lock symbol displayed in the address bar in the browser.

Procedures are implemented that adequately guarantee the exercise of data subject rights, such as deletion.

In addition, data protection is taken into account through data protection-friendly default settings (privacy by default) and technology design (privacy by design).

IV. Disclosure of personal data to third parties

In the course of processing personal data, it is possible that data will be transferred to or disclosed to other companies, legally independent organisational units or persons. This is the case, for example, with IT service providers, such as qwertiko GmbH (Waldstraße 41-43, 76133 Karlsruhe) or the Internet agency Navigate AG (Waldstraße 41-43, 76133 Karlsruhe) in the case of this web hosting.

V. Data processing in third countries

Data processing in third countries - i.e. in countries outside the European Union (EU), the European Economic Area (EEA) - does not take place directly by the data controller.

If service providers, such as Google Ireland Limited with its parent company Google LLC in the USA, process data outside the European Union, this is done in accordance with the legal requirements, according to the service providers.

We only have data processed in third countries with a recognised level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations, subject to express consent or contractually or legally required transfer.

VI. Provision of the website and creation of log files

1. Description and scope of data processing

The web hosting provider qwertiko GmbH (Waldstraße 41-43, 76133 Karlsruhe) is used for the provision of the website. The website is accessed from their servers or servers used by them.

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

(1) Information about the type of browser and the version used.

(2) The user's operating system

(3) The IP address of the user

(4) Date and time of access

(5) Websites from which the user's system accesses our website.

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. person concerned

The data subject is the respective website visitor.

3. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

4 Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

5. Duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

6. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

VII Contact form and e-mail contact

1. Description and scope of data processing

The website contains a contact form that can be used to contact us electronically, for example to request information about our products and services, to make general contact or to make an appointment. If you use this option, the data entered in the input mask will be transmitted to us and stored. In addition to possible voluntary information and your message content, we require at least the following information from you:

1. Name

2. E-mail address.

This information is required in order to process your enquiry, to address you correctly and to send you a reply.

The following data is also stored at the time the message is sent:

(1) date and time of sending

(2) Sender address and sender name

(3) Subject (if specified by you).

For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration.

Alternatively, it is possible to contact us via the e-mail address provided (in particular in the imprint and contact). In this case, the e-mail with the transmitted personal data of the user will be received and stored. The same applies to the sending of e-mails to you.

It should be expressly pointed out that contact via the Internet, in particular by e-mail, is generally not fully encrypted. Encryption only takes place on the transport route, unless an end-to-end encryption procedure is used. We therefore exclude any assumption of responsibility for transmission paths between sender and recipient that are not fully encrypted.

In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

2. Person concerned

The person concerned is the respective communication partner.

3. Legal basis for the data processing

The legal basis for the processing of data is Art. 6 (1) lit. a DSGVO if the user has given his or her consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

4. Purpose of the data processing

The processing of the personal data from the input mask serves solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. In addition, the data may be processed for the purpose of recognising SPAM.

5. Duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

The data stored at the time the message was sent is deleted after 180 days.

6. Possibility of objection and removal

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

VIII. Use of cookies

1. Description and scope of data processing

The website uses necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

The necessary cookies mapsWall, ma-disable, youtubeWall and cb-enabled are used to make the website more user-friendly. Some elements of the website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

1) mapsWall regulates the display of Google Maps.

2) ma-disable regulates the use of Matomo

3) youtubeWall controls the display of YouTube videos

4) cb-enabled controls the display of the cookie banner.

2. Legal basis for the data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.

3. Person concerned

The data subject is the respective user, e.g. website visitor.

4. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The cookie is required for the adoption of language settings. This purpose is also our legitimate interest in processing the personal data according to Art. 6 para. 1 lit. f DSGVO.

5. Duration of storage, possibility of objection and elimination

IX. Web analysis through Matomo

1. Scope of the processing of personal data

We use the open source software tool Matomo on our website to analyse the surfing behaviour of our users. The software sets a cookie on the user's computer. If individual pages of our website are called up, the following data in particular are stored:

(1) Two bytes of the IP address of the user's calling system.

(2) The website called up

(3) The website from which the user accessed the accessed website (referrer)

(4) The sub-pages accessed from the accessed website

(5) The time spent on the website

(6) The frequency with which the website is accessed

(7) Your operating system used, your screen resolution, your browser.

The software runs exclusively on the servers of our provider qwertiko GmbH (Waldstraße 41-43, 76133 Karlsruhe). Personal data of the users is only stored there. The data is not passed on to third parties.

The software is set in such a way that the IP addresses are not stored in full, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

2. Person concerned

The person concerned is the respective website visitor.

3. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is Art. 6 para. 1 lit. f DSGVO.

4. Purpose of the data processing

The processing of the users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes are also our legitimate interest in processing the data in accordance with Art. 6 Para. 1 lit. f DSGVO. By annymising the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

5. Duration of the storage

The data will be deleted as soon as it is no longer required for our recording purposes.

6. Possibility of objection and removal

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

We offer our users the option of opting out of the analysis process on our website. To do this, you must follow the corresponding link. In this way, another cookie is set on your system, which signals to our system not to save the user's data. If the user deletes the corresponding cookie from their own system in the meantime, they must set the opt-out cookie again.

Further information on the privacy settings of the Matomo software can be found under the following link:

https://matomo.org/docs/privacy/.

X. Integration of YouTube videos

We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. No videos are displayed or loaded when you visit our site, so no data about you as a user is transmitted to YouTube. Only when you want to preview or play the videos can personal data be transmitted to Youtube. We have no influence on this data transmission. It is only possible to display the preview or play the videos if you set the "YouTube" cookie settings for the entire website to "on". The service provider of YouTube videos is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Detailed information can be found in the privacy policy at: https://policies.google.com/privacy.

If the "YouTube" cookie setting is switched on, the following applies.

1. Scope of the processing of personal data

The scope of the processing of personal data depends on the settings made with the service provider. Depending on the setting, for example, usage data (e.g. websites visited, access times or interest in certain content), meta/communication data (e.g. IP address, device information) or interactions with content and functions may be processed. You can find setting options in particular under: https://policies.google.com/privacy?hl=de#infochoices .

Data collection by the service provider takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to other services of the service provider (e.g. Gmail), your data will be assigned to your account. If you do not want your data to be associated with your profile, you should log out of YouTube before activating the cookie settings.

2. Person concerned

The data subject is the respective website visitor.

3. Legal basis for data processing

The legal basis for the processing of data is Art. 6 (1) lit. a DSGVO if the user has given his consent; Art. 6 (1) lit. b DSGVO if the processing relates to the performance of a contract or a pre-contractual enquiry; and Art. 6 (1) lit. f DSGVO if the user has legitimate interests.

Purpose of the data processing
The processing of personal data serves to provide our online offer and user-friendliness. This is also the legitimate interest according to Art. 6 para. 1 lit. f DSGVO.

The service provider stores your data as usage profiles and uses them, for example, for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

5 Duration of storage

The storage period of the personal data depends on the specifications and the settings made with the service provider.

6. Possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. You have the right to object to the creation of user profiles. To exercise this right, you can contact the service provider directly. A possibility to object (opt-out) is granted with the opt-out plug-in: tools.google.com/dlpage/gaoptout. An adjustment of the data protection settings is possible at https://policies.google.com/privacy.

XI. Integration of Google Maps

On this website, we use Google Maps to display (land) maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. No maps are displayed or loaded when you visit our site, so no data about you as a user is transmitted to Google Maps. Only when you display the maps can personal data be transmitted to Google Maps. We have no influence on this data transmission. It is only possible to display the maps if you set the "Google Maps" cookie settings for the entire website to "on". The service provider of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Detailed information can be found in the privacy policy at https://policies.google.com/privacy.

If the "Google Maps" cookie setting is switched on, the following applies.

1 Scope of the processing of personal data

The scope of the processing of personal data depends on the settings made with the service provider. Depending on the setting, for example, usage data (e.g. web pages visited, access times or interest in certain content), meta/communication data (e.g. IP address, device information) or interactions with content and functions may be processed. Setting options can be found in particular at https://policies.google.com/privacy?hl=de#infochoices.

The collection of data by the service provider takes place regardless of whether the service provider provides a user account via which you are logged in or whether no user account exists. If you are logged in to other services of the service provider (e.g. Google Mail), your data will be assigned to your account. If you do not wish to have your data associated with your profile, you should log out of Google Maps before activating the cookie settings.

2. Data subject

The data subject is the respective website visitor.

3. Legal basis for data processing

The legal basis for the processing of data is Art. 6 (1) lit. a DSGVO if the user has given consent; Art. 6 (1) lit. b DSGVO if the processing relates to the performance of a contract or a pre-contractual enquiry; and Art. 6 (1) lit. f DSGVO if the user has legitimate interests.

4. Purpose of the data processing

The processing of personal data serves to provide our online offer and user-friendliness. This is also the legitimate interest according to Art. 6 para. 1 lit. f DSGVO.

5. Duration of storage

The storage period of the personal data depends on the specifications and the settings made with the service provider.

6. Possibility of objection and removal

XII. Your rights

(1) If personal data of you as a user is processed, you are a data subject and you are entitled to the following rights against the controller, in particular from Art. 15 to 21 DSGVO:

- Right to object to processing,

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

- Right to withdraw consent,

You have the right to revoke any consent you have given at any time.

- Right to information,

You have the right to request confirmation as to whether personal data concerning you is being processed. If such processing is taking place, you have the right to be informed about this data and to receive further information and a copy of the data in accordance with the legal requirements.

- Right to rectification,

You have the right, in accordance with the law, to request that data concerning you be completed or that inaccurate data concerning you be corrected.

- Right to erasure and to restriction of processing.

In accordance with legal requirements, you have the right to request that data relating to you be deleted without delay, or alternatively, in accordance with legal requirements, to request that the processing of the data be restricted.

- Right to data portability,

You have the right to obtain the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

(2) If you are of the opinion that the processing of personal data concerning you violates data protection regulations, you have the right to complain to a supervisory authority. You can find the contact details of the competent supervisory authorities, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, by searching the Internet.

Any Questions? Give us a call!

RIS Facility Management GmbH

RIS-BG Environmental GmbH