2. Collection and storage of personal data as well as type, purpose and legal basis
a) When simply visiting our websites
You can visit our websites without disclosing your identity. In any case, data will be collected in log files, via search engines, and in forms.
The following information is collected without any input from you:
The IP address of the requesting computer
The date, duration and time of access
The name and URL of the file accessed, i.e. the websites which you visit on the site
The website from which access was made (referrer URL)
The browser you are using and, if applicable, your computer’s operating system, geographic origin, language setting, and your access provider’s name
When you use the search function the website, the search terms you entered
We process this data for the following purposes:
To improve the usability of the website
To ensure system security and stability
For technical administration of the network infrastructure and to optimize the search function on the website
The legal basis for processing the data is Art. 6 (1) sentence 1 lit. f of the General Data Protection Regulation (GDPR). Our legitimate interest follows from the above-listed purposes of data collection. Under no circumstances will we use the data collected in order to draw conclusions about your person.
This data remains stored until it is automatically deleted. The data will be deleted when the above-mentioned purpose no longer exists.
b) Registration and login to the site.
Your data helps us to customize and continuously improve your user experience. As a registered user, you can use more functions than guest users. In order for you to be able to use these functions, we must store and process your data. You will, therefore, have to consent to the storage and processing of your data when you register as a user of the site
When you register as a user into the site, we request the following data from you:
First name and family name
Job title (optional)
We collect this data in order to be able to identify you as the site’s registered user.
The data will be processed at your request and, pursuant to Art. 6 (1) sentence 1 lit. b GDPR, it is required for the above-mentioned purposes for the performance of the contract as well as pre-contractual measures.
The personal data which we collect for registration and login will be stored by us until you revoke your consent to such processing or until we discontinue the processing of the data unless we are obliged to store such data for a longer period pursuant to Art. 6 (1) sentence 1 lit. c GDPR because of storage and documentation obligations under tax and commercial law or unless you have consented to further storage pursuant to Art. 6 (1) sentence 1 lit. a GDPR.
d) Consent to use data on the site
If you have registered as a user and log in to the site, you consent to the storage, processing, and use of your personal data in accordance with this privacy statement.
Detailed data of your use of our site will be recorded for the duration of your registration. This primarily includes the following details:
The duration of the visit
The item or word searched for, viewed and tagged on our website
Your navigation on our website
The origin website and the exit page
This data is collected, stored and processed so that we can customize and continuously improve your user experience and provide you with convenience features.
By registering and logging in to the site, you also agree to our use of your email address and the detailed data of your use of the site as follows:
You can unsubscribe from this service at any time within the e-mail.
We will regularly send you our (personalized) newsletter by email. We use the detailed data of your use of our site in order to personalize the newsletter for you. In this way, we can send you special content that is not available to unregistered users from time to time and on special occasions.
Data processing pursuant to Art. 6 (1) sentence 1 lit. a GDPR is based on your consent.
The detailed data concerning your use of the site which we collect will be stored by us until you revoke your consent to such processing or until we discontinue the processing of the data.
e) When using the contact form
You can send us general enquiries using the contact form provided on our website. A valid e-mail address or telephone number must be provided so that we can respond to your enquiry.
Any other personal data, such as your name, address or telephone number is not collected unless you voluntarily disclose this information. This data is collected in order to know who the enquiry originated from and to be able to answer it using your preferred channel (telephone or email).
Data processing for the purpose of contacting us is based on Art. 6 (1) sentence 1 lit. a GDPR on the basis of your voluntary consent or on the basis of Art. 6 (1) lit. b GDPR and/or to safeguard our legitimate interests pursuant to Art. 6 (1) lit. f GDPR.
It is our legitimate interest to be able to respond to customer (visitor) inquiries and to thereby ensure functioning customer service.
The personal data which we collect when the contact form is used will be deleted after your request has been dealt with.
f) When subscribing to our newsletter
As a registered user or interested party at RPAWR, we would also like to send you our newsletter.
If you have expressly consented, we will use your email address in order to regularly send you our personalized newsletter.
In order to ensure that no errors occur when you enter your email address and your consent, we use the so-called double opt-in procedure: After you have entered your email address in the registration box, we will send you a confirmation link. Your email address will not be added to our mailing list until you have clicked this confirmation link.
According to GDPR, such data processing is also lawful as our legitimate interest on the basis of Art. 6 (1) lit. F thereof.
You can unsubscribe at any time, for example, via a link at the end of each newsletter. Or you can send an email to email@example.com and request unsubscription at any time.
Your personal data collected in this context will be deleted immediately after unsubscription.
3. When and for what purpose does RPAWR use ‘cookies’?
Cookies do no damage your device, nor do they contain viruses, Trojans or other malware.
We use the so-called session cookies in order to recognize that you already visited certain pages of our website, that you already logged in to your user account or to display your shopping basket. Session cookies are automatically deleted when you leave our site.
Other cookies remain on your device for a certain defined period of time. They enable us to recognize your computer during your next visit (so-called permanent cookies). These cookies enable us to welcome you with your user name, for example, so that you do not need to re-enter your password or fill in forms with your data for future orders. However, this does not mean that we are directly able to identify you.
The purpose of cookies is to make your visit to our website attractive and to enable the use of certain functions.
Data processing by cookies is necessary for the above-mentioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) sentence 1 lit. f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is generated. However, complete deactivation of cookies can mean that you will not be able to use all of the functions of our website. For information regarding the cookie settings in your browser, click here.
4. Web analytics
Like many other providers, RPAWR also uses various methods to analyze the use of our websites.
The tracking and targeting measures listed below and used by us are carried out on the basis of Art. 6 (1) sentence 1 lit. f GDPR.
We use these tracking measures in order to ensure a requirement-compliant design and the continuous optimization of our website. On the other hand, we use the tracking measures in order to statistically analyze the use of our website and to evaluate it for the purpose of optimizing our offering for you.
The targeting measures used by us are designed to ensure that you only receive advertising on your devices that are oriented towards your actual or assumed interests.
These interests are to be deemed to be legitimate within the meaning of Art. 6 (1) sentence 1 lit. f GDPR.
The respective data processing purposes and data categories are described in the corresponding tracking and targeting tools.
a) Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (‘Google’). This is an effective tool for evaluating and marketing our website.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage.
Google may also forward this information to third parties if this is required by law or if third parties process this data on behalf of Google.
Under no circumstances will Google associate the IP address with other Google data.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking the link when you visit our site. This will set an opt-out cookie which will prevent your data from being recorded when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
5. Rights of data subjects
You have the right:
- pursuant to Art. 15 GDPR to request information regarding your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
- pursuant to Art. 16 GDPR, to demand immediate rectification of incorrect data or completion of personal data stored by us;
- pursuant to Art. 17 GDPR, to request erasure of your personal data stored by us unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, to restrict the processing of your personal data in as far as you dispute the accuracy of the data, if the processing is unlawful but you reject the erasure of data and we no longer need the data, but if you need such data in order to assert, exercise or defend legal claims or if you have filed an objection to processing pursuant to Art. 21 GDPR;
- pursuant to Art. 7 (3) GDPR, to revoke your prior consent at any time. As a result, we are then no longer permitted to continue processing data based on this consent in the future and
- pursuant to Art. 77 GDPR, to complain to a regulatory authority. For this purpose, you can generally contact the regulatory authority responsible for your usual place of residence or you can directly contact us.
The contact details of the regulatory authority responsible for our company’s registered office are as follows:
National Authority for Data Protection and Freedom of Information
Szilágyi Erzsébet fasor 22/C
Telefon +36 1 3911 400
6. Right of objection
If your personal data is processed on the basis of our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR in as far as the reasons for this are based on your specific situation or if you object to direct advertising. In the latter case, you have a general right of objection which we will implement without the need to specify a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to firstname.lastname@example.org
8. Data security:
Please remember that transmitting information and data over the Internet always poses a security risk. We have therefore implemented technical and organizational measures to protect your personal data. These measures protect your data from unauthorized processing, loss, as well as unauthorized alteration and unauthorized access. Our security measures are continuously improved in line with technological developments.
The Internet offerings of RPAWR work with 256-bit TLS encryption. TLS stands for ‘Transport Layer Security’ and is an encryption method that guarantees secure communications on the World Wide Web. Data is transmitted via a secure HTTPS connection. This protects the data from unauthorized manipulation or alteration so that third parties can neither read nor download the data. As soon as you access our website, the encryption function is activated. A lock appears in the lower screen bar as the encryption icon. All the following pages are then TLS-protected.
9. Up-to-dateness of an amendment to this privacy statement
This data protection declaration is currently valid and has the revision status as per 18 May 2018.
Due to the further development of our website and offerings on this website or due to changed legal or official requirements, it may become necessary to revise this privacy statement.