Data protection statement

1. Data protection overview

General Information

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data includes all data that may be used to identify you personally. For detailed information relating to data protection, please consult the Data Protection Statement which is found below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The legal information section of this website provides contact details.

What data do we collect?

We collect the following data:

(1) Name of file retrieved
(2) The date and time of the file (page) retrieval
(3) Quantity of data transferred
(4) Notification of successful retrieval
(5) Web browser
(6) Domain from which request was sent

We also record the IP address of the computer making the request.

In the event that you use our web services, additional data may be collected. These accord with the information you have provided and/or the documents you make available. As a rule, this relates to information for the order process.

How do we collect your data?

Your data may be acquired by you directly providing them to us. This can, for example, be data you enter into a contact form.

Other data are automatically collected by our IT systems when you visit our website. This includes primarily technical data (e.g. web browser, operating system, time of page retrieval). This data collection occurs automatically as soon as you visit our website.

What do we use your data for?

Some of the data are used to ensure fault-free delivery of the website. Other data may be used to analyse your behaviour as a user.

We collect, store and process your personal data when you log in on our website. Beyond this, as a rule, we only collect, store and process your personal data when you have indicated your consent and either are already a customer or wish to become a customer; this is exclusively for one of the following purposes:

• To answer a question you ask,
• To process a message you send OR
• To produce your customer card.

What rights do you have with respect to your data?

You have the right, at any time and free of charge, to be informed on the source, recipient and purpose of any of your personal data that we have stored. Furthermore, you have the right to request that your data are corrected, blocked or deleted. For this purpose and for any other questions relating to data protection, you may contact us at any time using the address provided in the legal information section of this website. You are also entitled to lodge a complaint with the responsible supervisory authority.

Withdrawal of consent and erasure of data

The collection of data to provide the website and the storage of data in logfiles is essential to the operation of the website. The user therefore does not have the opportunity to withdraw consent.

You may withdraw your consent to the processing of your personal data at any time. Contact us by email at any time to withdraw consent to the storage of your personal data. In such a case, however, the conversation cannot be continued.

Analytical tools and third-party tools

Your surfing behaviour may be statistically analysed when you visit our website. This takes place primarily with cookies and so-called analytical tools. The analysis of your surfing behaviour is normally anonymous; the surfing behaviour cannot be traced back to you. You may refuse consent to this analysis or prevent it by not using specific tools. Detailed information may be found in the following Data Protection Statement.

You may refuse consent to this analysis. We will inform you about options for refusing or withdrawing consent in this Data Protection Statement.

2. General notices and mandatory information

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and with the provisions of this Data Protection Statement.

When you visit this website, various personal data are collected. Personal data are data that may be used to identify you personally. This Data Protection Statement explains the data that we collect and what we use them for. It also explains how this is done and to what purpose.

We draw your attention to the fact that data transmission on the internet (e.g. in email communication) may be subject to security vulnerabilities. Complete protection of data from third party access is not possible.

Notification of Controller:

The Controller for data processing on this website is:
Walter Ritter GmbH & Co. KG
Spaldingstrasse 110B
20097 Hamburg
Telephone: 040 / 236996-0
Email: info@walterritter.com

The Controller is the natural or legal person who, alone or together with others, decides on the purpose and means for processing personal data (e.g. name, email address, etc.).

Withdrawal of your consent to data processing

Many data processing events are only possible with your express consent. You may withdraw consent that you have already granted at any time. An informal email to us is sufficient. The legality of data processing that took place before the withdrawal of consent is not affected by the withdrawal.

SSL and/or TLS encryption

For security reasons and to protect the transfer of confidential data, such as orders or enquiries that you send to us as the site operator, this site uses SSL and/or TLS encryption. An encrypted connection may be identified by the fact that the address line in the web browser changes from “http://” to “https://” accompanied by a lock symbol.

When SSL or TLS encryption is activated, the data you send to us cannot be intercepted and read by third parties.

Access, Blocking, Erasure

Within the framework of applicable legal provisions, you have the right at any time to obtain access to information on your stored personal data, the origin and recipient of such data, the purpose of data processing and, where appropriate, the rectification, blocking and erasure of such data. For this purpose and for any other questions relating to personal data, you may contact us at any time using the address provided in the legal information section of this website.

Objection to advertising email

Der Nutzung von im Rahmen der Impressumspflicht veröffentlichten Kontaktdaten zur Übersendung von nicht ausdrücklich angeforderter Werbung und Informationsmaterialien wird hiermit widersprochen. Die Betreiber der Seiten behalten sich ausdrücklich rechtliche Schritte im Falle der unverlangten Zusendung von Werbeinformationen, etwa durch Spam-E-Mails, vor.

3. Data Protection Officer

Legally mandated Data Protection Officer

WR Group GmbH
Alina Wiesner
Spaldingstr. 110 B
20097 Hamburg, Germany
E-mail: datenschutz@walterritter.com

4. Data collection on our website

Cookies

The web pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our service more user-friendly, effective and secure. Cookies are small text files stored on your computer by your web browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit to our website. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser next time you visit the site.

You may configure your browser so that you are informed when cookies are set and asked to approve of each individual cookie, so that cookies are automatically refused for specific cases or in general, and so that cookies are automatically deleted when you close your browser. If you deactivate cookies, the functionality of this website may be impaired.

Cookies required for the provision of electronic communication or specific functions you have opted to use (e.g. shopping cart functionality) are stored on the basis of GDPR Article 6 (1) (f). The website operator has a legitimate interest in the storage of cookies to facilitate the technically correct and optimised provision of its services. Insofar as other cookies are stored (e.g. cookies to analyse your surfing behaviour), these are addressed specifically within this Data Protection Statement.

Server logfiles

The provider of these pages automatically collects and stores information in so-called server logfiles. This information is automatically transmitted to us by your web browser. The following information is transmitted:

• browser type and version
• operating system being used
• referrer URL
• hostname of the client computer
• time of server request
• IP address

These data are not combined with other data sources.

The basis for this data processing is provided by GDPR Article 6 (1) (f), which allows the processing of data to fulfil a contract or precontractual measures.

Contact form

If you send us an enquiry via our contact form, we save the information you provide on the form, including your contact data, for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on without your consent.

The processing of the data provided on the contact form therefore takes place exclusively on the basis of your consent (GDPR Article 6 (1) (a)). You may withdraw this consent at any time. An informal email to us is sufficient. The legality of data processing that took place before the withdrawal of consent is not affected by the withdrawal.

The data you provided on the contact form remain with us until such time as you request erasure, you withdraw your consent to storage, or the purpose for data storage is no longer valid (e.g. once processing of your enquiry has been completed). Binding legal provisions, in particular legally mandated retention periods, remain unaffected.

5. Analytical tools and advertising

Google Analytics

This website uses functions of the Google Analytics web analysis service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The legal basis for the storage of Google Analytics cookies is provided by GDPR Art. 6 (1) (f). The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both its web service and its advertising.

IP anonymisation

We have activated the IP anonymising function for this website. This means that your IP address is truncted by Google within a member state of the European Union or another state that is party to the European Economic Area treaty before transmission to the USA. Only in exceptional circumstances is the full IP address then sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to analyse your usage of the website, to generate reports on website activity for the website operator, and to provide further services associated with the usage of the website and the internet. The IP address transferred as part of the Google Analytics service is not combined with other data stored by Google.

Browser plugin

you, however, that this may result in you not being able to make full use of some functional aspects of this website. Furthermore, you may also prevent the data relating to your usage of the website, gathered using cookies (including your IP address) being acquired and/or processed by Google. To do so, download and install a browser plugin available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection

You may prevent the collection of your data by Google Analytics by selecting the link below. This will set an opt-out cookie that prevents the collection of your data on future visits to this website: Deactivate Google Analytics.

For more information about how Google Analytics treats user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Data processing order

We have conclued a data processing order contract with Google, fully implementing the strict requirements of Germany’s data protection authorities in the usage of Google Analytics.

Demographics on Google Analytics

This website uses the “Demographics” functionality of Google Analytics. This allows for reports to be generated that deliver analysis of the age, sex and interests of site visitors. These data originate with interest-related Google advertising and visitor data from third parties providers. The data cannot be associated with a specific person. You can deactivate this function at any time using the advertising settings in your Google account. You may also generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA aims to determine whether data entered on our website (e.g. on a contact form) is entered by a human or by an automated computer program. For this purpose, reCAPTCHA analyses various characteristics of the website visitor’s behaviour. The analysis begins automatically as soon as the visitor accesses the website. Information analysed by reCAPTCHA includes the IP address, the time spent by the visitor on the website, and mouse movements. The data collected in the analysis are transmitted to Google.

reCAPTCHA analysis takes place completely in the background. Website visitors are not notified that analysis is taking place.

The legal basis for this data processing is provided by GDPR Art. 6 (1) (f). The website operator has a legitimate interest in protecting its web services from spam and from abusive automated spying.

For further information on Google reCAPTCHA and the Google Data Protection Statement, consult the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

6. Plugins and tools

Google Web Fonts

This website uses so-called Web Fonts, provided by Google, to ensure that typefaces are presented consistently. When a page is retrieved, your browser stores the required fonts in its browser cache so that text and typefaces can be displayed correctly.

For this purpose, your browser must initiate a connection to Google’s servers. This informs Google that your IP address has been used to visit our website. The usage of Google Web Fonts takes place in the interest of a consistent and attractive presentation of our online services. This represents a legitimate interest in the sense of GDPR Article 6 (1) (f).

If your browser does not support Web Fonts, a standard font from your computer is used.

For further information on Google Web Fonts, consult https://developers.google.com/fonts/faq and the Google Data Protection Statement at https://www.google.com/policies/privacy/.

Google Maps

This site uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The functionality of Google Maps requires the storage of your IP address. Information is, as a rule, sent to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps takes place in the interest of an attractive presentation of our online services and the easier location of places named by us on the website. This represents a legitimate interest in the sense of GDPR Article 6 (1) (f).

7. YouTube and tools

Our website uses plugins from the YouTube site, operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages that includes a YouTube plugin, a connection is created to the YouTube servers. The YouTube servers receive information about which of our pages you have visited.

If you are logged in to your YouTube account, you enable YouTube to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.

The usage of YouTube takes place in the interest of an attractive presentation of our online services. This represents a legitimate interest in the sense of GDPR Article 6 (1) (f).

Further information on the usage and treatment of user data may be found in the YouTube privacy statement: https://www.google.de/intl/en/policies/privacy.

8. Existing rights pursuant to GDPR

As already stated above, the GDPR guarantees you various rights related to the processing of your personal data. We inform you of these rights once more in the following:

Should your personal data be processed, you are a Data Subject in the sense of GDPR, and you have the following rights in relation to the Controller.

1. Right of Access

You have the right to obtain from the Controller confirmation as to whether or not personal data concerning you are being processed by us. If such processing is taking place, you have the right to obtain the following information from the Controller:

1. the purpose of the processing of personal data;
2. the categories of personal data concerned;
3. the recipients or categories of recipient to whom the personal data have been or will be disclosed;
4. the envisaged period for which the personal data will be stored, or, if definite statements to this effect are not possible, the criteria used to determine that period;
5. where the personal data are not collected from the data subject, any available information as to their source.

You have the right to obtain information about whether personal data concerning you have been or will be transferred to a third country or an international organisation. In this regard, you have the right to be informed of the appropriate safeguards pursuant to GDPR Article 46 relating to the transfer.

2. Right to Rectification

You have the right to obtain from the Controller the rectification and/or completion of inaccurate or incomplete personal data concerning you. The Controller must rectify the data without delay.

3. Right to Restriction of Processing

You have the right to obtain from the Controller restriction of processing where one of the following applies:

1. you contest the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data;
2. the processing is unlawful and you opposes the erasure of the personal data, requesting instead the restriction of their use;
3. the Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
4. you have objected to processing pursuant to GDPR Article 21(1) pending the verification whether the legitimate grounds of the Controller override your own.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Where processing has been restricted in line with the conditions above, you shall be informed by the Controller before the restriction of processing is lifted.

4. Right to Erasure

a) Obligation to erase

You have the right to obtain from the Controller the erasure of personal data concerning you without undue delay and the Controller has the obligation to erase personal data without undue delay where one of the following grounds applies:

1. the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
2. you withdraw the consent on which the processing is based according to point of GDPR Article 6 (1) (a) or Article 9 (2) (a), and there is no other legal ground for the processing;
3. you object to the processing pursuant to GDPR Article 21 (1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to GDPR Article 21 (2);
4. personal data concerning you have been unlawfully processed;
5. the personal data have to be erased for compliance with a legal obligation in European Union or Member State law to which the Controller is subject;
6. the personal data have been collected in relation to the offer of information society services referred to in GDPR Article 8(1).

b) Information issued to third parties

Where the Controller has made the personal data public and is obliged pursuant to GDPR Article 17 (1) to erase the personal data, the Controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The Right to Erasure shall not apply to the extent that processing is necessary:

1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing by European Union or Member State law to which the Controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
3. for reasons of public interest in the area of public health in accordance with GDPR Article 9 (2) (h) & (i) as well as Article 9 (3);
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with GDPR Article 89 (1) in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing;
5. for the establishment, exercise or defence of legal claims.

5. Right of Notification

Where you have exercised your right to rectification, erasure or restriction of processing, the Controller shall communicate this to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to be notified of these recipients by the Controller.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the Controller, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from the Controller to which the personal data have been provided, where:

1. the processing is based on consent pursuant to GDPR Article 6 (1) (a) or Article 9 (2) (a) or on a contract pursuant to Article 6 (1) (b); and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.

The Right to Data Portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

7. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on GDPR Article 6 (1) (e) or (f); this shall also apply for profiling based on these provisions.

The Controller shall no longer process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Should the personal data in question be processed for the purposes of direct advertising, you have the right to object to the processing of your personal data for the purposes of such advertising at any time; this also applies to profiling where it is associated with such direct advertising.

If you object to processing for the purposes of direct advertising, your personal data will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your Right to Object by automated means using technical specifications. Right to Withdraw Consent to Data Processing.

You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to GDPR Article 78.

Addendum:

We have implemented technical and organisational measures in order to ensure that data protection regulations are observed both by us and by external service providers. It is possible that amendments to this Data Protection Statement will become necessary as our services are enhanced and/or new technologies are implemented. The date of the last amendment to the Data Protection Statement can be found at the end of the text. On the basis of this date, you can see if we have made changes to the Data Protection Statement since your last visit to our website.

Date of issue: May 2018