PRIVACY POLICY

Thank you for visiting our website and for your interest in our services. We would like you to enjoy your visit to our website and not have to worry about the confidentiality of your data. We are very committed to data protection and consider transparency in the handling of your data to be highly important. Accordingly, we wish to inform you about what data we collect, the purposes for which we do this and how you can exercise control over your data at any time.

1.   Data controller

The data controller within the meaning of the law governing the processing of personal data is:

RTSB Group
Industriestr. 24
61381 Friedrichsdorf

info@rtsb.de

2.   Categories of data, purpose and legal basis of the processing

You can of course visit our website without providing any personal information. You can access our privacy policy via the link at the bottom of each page.

We only use your personal data when you visit our website to operate and optimise our website. For this purpose, the IP address, various technical data of the end device (e.g. operating system, browser used, etc.) as well as data on the use of our website are collected. We do not store this data beyond the legal retention periods or the fulfilment of the intended purpose. Processing of this data is necessary to ensure the operation of the website. If you do not agree to this processing, we will not be able to provide you with our online services. We evaluate this information statistically in order to make the use of our website even more convenient for all visitors. It is not linked to any personal data already stored by us. The data collected in the course of your use of the website will be deleted after 14 months at the latest. In individual cases the storage of data may be extended in order to enforce legal claims, to defend against any legal claims or due to statutory obligations.

 The processing of personal data for the purpose of operating the website as well as network and information security is based on Art. 6 Para. 1 S. 1 lit. f GDPR. There is no legal or contractual obligation on your part to provide data in the context of using our website. However, it is not possible to operate the website or respond to your enquiries without processing your data.

3.   Data recipients

Your data will not be disclosed to third parties unless there is a legal obligation to disclose the data. Processing is carried out on the basis of Art. 6 Para. 1 lit. c) GDPR and in connection with the specific order or legal obligation to which we are subject in the individual case. In accordance with Art. 6 Para. 1 lit. c) GDPR, personal data may be processed if the processing is necessary for compliance with a legal obligation to which the controller is subject. Categories of recipients of the data are public bodies in the case of a legal obligation and contract processors who process the data collected online on our behalf, as well as joint controllers with us. The processors involved are:

Mailerlite

Joint Controllers with us are:

LinkedIn Unlimited Company

4.   Contact form

Using our contact form, you provide us with your personal data. This includes name, email-address and information for the purpose of providing you with an individual offer. We will use this information only for your particular claims or requests. To protect your personal data, the transmission/transfer is coded by a common encryption method.

The legal basis for the processing of general enquiries is your consent in accordance with Art. 6 Para. 1 S. 1 lit a GDPR.

In the case of inquiries about contracts or in the context of contract initiation, the legal basis is Art. 6 Para. 1 S. 1 lit. b GDPR.

The legal basis for inquiries about data protection is Art. 6 Para. 1 S. 1 lit. c GDPR.

Submitting the form constitutes your consent to the processing of the data.

We will retain your personal data for the period necessary to fulfill the purposes described in this statement or the statutory warranty obligations are fulfilled.

5.   Newsletter

If you would like to receive the newsletter offered on the website, we require an email address, as well as other information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will then be deleted. Data that has been stored by us for other purposes remains unaffected by this. 

 Newsletters are sent by MailerLite (UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania).MailerLite is a service with which the distribution of newsletters can be organised and analysed. The data you enter for the purpose of receiving newsletters (e. g. email address) is stored on Mailerlite’s servers in the EU. The newsletters we send with MailerLite enable us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e. g. purchase of a product on our website) has taken place after the link in the newsletter has been clicked.

For more information on MailerLite’s data analysis, please see:
https://www.mailerlite.com/legal/privacy-policy

 If you do not wish any analysis by MailerLite you must object to being sent the newsletter. An informal letter/email to us is sufficient for this purpose. 
The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the MailerLite servers after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.   
For more details, please refer to the privacy policy of MailerLite.

6.   Applications

If you are interested in a vacancy and fill out the application form, we collect the following personal data, among others: name, email address, and the data that you send us with your application documents (e. g. references, CV, etc.).

We will only use your personal data as part of the application process for the purpose of selecting a suitable employee. For this purpose, the data you have submitted to us will be recorded and processed in our email and HR systems.

The data processing is based on Art. 6 1 b) GDPR. We store this data for up to 6 months after the end of the application process. After that, the data will be deleted. 

The storage of data may be extended in individual cases to enforce legal claims, to defend against any legal claims or due to legal obligations.

In accordance with Art. 13 Para. 2 e) GDPR there is no legal or contractual obligation on your part to provide data as part of the application. However, we may refuse to consider your application due to incomplete information. In this case, we will inform you and delete your data.

Your data will not be disclosed to third parties unless there is a legal obligation to disclose it. This processing is based on Art. 6 Para. 1 S. 1 lit. c GDPR and in connection with the respective order or legal obligation to which we are subject in the individual case. Categories of recipients of the data are public bodies in the event of a legal obligation, HR managers and decision-makers in our company and contract processors who process your applicant data on our behalf. 

7.   Cookies

We use session cookies on our website. In the following, we would like to briefly explain the purpose of these cookies. Cookies are short snippets of text that we store on your computer. Cookies do not execute commands on your computer, so they do not pose a security risk. Session cookies store certain information while you browse our website and are not stored permanently, but are deleted when you leave our website. The use of session cookies is based on Article 6 (1) (f). The operation of the website is in the legitimate interest of the controller. You can control the handling of cookies in your browser, you can even reject cookies altogether or configure your browser so that cookies are deleted regularly. You will find sufficient information on this on the Internet.

8.   Google Analytics

This Website uses Google Analytics, a web analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “Cookies” – small text files that are placed on your computer and which allow an analysis of the use of our website by you.

Among other things, the following data is collected from you: IP address, time spent on the website, language, location, and the browser you are using. The analysis is carried out by means of an algorithm (machine learning) that measures and analyzes your user behavior based on the collected data and can recognize it on other devices you use. By default, your IP address is anonymized by shortening it before it is transmitted to Google.

 We’ve also disabled the collection of accurate location, location, and device data.

We have disabled Google Signals.

You can find more detailed information about how Google uses those data here: https://policies.google.com/privacy/partners?hl=de

The transfer of data to the USA is based on the Data Privacy Framework.

Google Analytics will only be used if you have given your consent.

The legal basis is Art. 6 Para. 1 S. 1 lit a GDPR and § 25 TTDSG.

You can revoke this consent at any time by clicking on the “Cookie settings” button under “Cookies” and saving a new selection.

The data collected with Google Analytics is passed on internally to our marketing department.

9.   Google reCAPTCHA

This website uses Google reCAPTCHA (“reCAPTCHA” in the following) by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

ReCAPTCHA is supposed to confirm whether a data entry (e. g. contact form) has been done by a human being or an automated program. For this purpose, reCAPTCHA analyses the visitor’s behaviour by certain characteristics. The analysis starts automatically as soon as the visitor visits the website.

For the analysis reCAPTCHA assesses different information (e. g. IP-address, how long the visitor stays on the website and mouse movements). The data collected will be transferred to Google. The reCAPTCHA analyses are carried out completely in the background. Website visitors are not informed about the analyses.

Legal basis for the storage and analysis of the data is Art. 6 Para. 1 S. 1 lit. f GDPR.

The operator of the website’s legitimate interest is protecting his web content from abusive automated spying and SPAM.

More information about reCAPTCHA can be found in the Google data protection notice and the terms of service:
https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de

10. Social Media Profiles

For enlarging our reach, we have profiles on different social media platforms. If you visit our profile the operator of those might process also your personal data.

 Plug-ins

Our website uses the plug-ins and functions of the social network LinkedIn.

This services is operated by
LinkedIn Ireland Limited Company, Wilton Place, Dublin 2, Ireland,

If you access Internet pages of our website that are provided with such a plug-in, your browser establishes a direct connection to the servers of LinkedIn.

The content of the plug-ins is transmitted directly to your browser by the relevant provider and integrated into the page. Through the integration of the plug-ins the relevant provider receives the information that your browser has accessed the corresponding page of our website, even if you don’t have a profile or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server of the relevant provider (e. g. in the USA, Ireland, Germany) and stored there.

If you are logged in to the particular service, the provider in question can directly assign your visit to our website to your profile. If you interact with the plug-ins, for example by clicking the “Like” button, using the Share Function, etc., the corresponding information is also transmitted directly to a server of the relevant provider and stored there. The information is also published on the relevant social media network and displayed there to your contacts or other visitors.

For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policies of  LinkedIn: https://www.linkedin.com/legal/privacy-policy

The legal basis for the transfer of your data is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

LinkedIn

We use a LinkedIn account operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. In order to modify your settings concerning advertising measures in your profile at LinkedIn, please use the following link: 
 https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

We entered a Joint Controllership-Agreement with LinkedIn. This agreement states for which data processing operations we or LinkedIn are responsible when you visit our LinkedIn profile. LinkedIn Ireland is primarily responsible according to GDPR for the processing of Insight data. You can view this agreement here:

https://legal.linkedin.com/pages-joint-controller-addendum

The data protection notice of LinkedIn can be found here: 

https://www.linkedin.com/legal/privacy-policy  

Tencent WeChat

We use a Tencent WeChat account by Tencent International Service Europe B.V., 26.04 on the 26th floor of Amstelplein 54, 1096 BC Amsterdam, Netherlands.

You can find the data protection notice of WeChat here:

https://www.wechat.com/de/privacy_policy.html#pp_sharing

Sina Weibo

We use a Weibo account of the Chinese operator Sina Corporation. Currently there is no data protection notice available.

11. Your rights in relation to the processing of your personal data

With regard to the processing of personal data, you have various rights, which we would like to inform you about below. You can also find details of your rights in Articles 15 to 21 GDPR and Sections 32 to 37 of the German Federal Data Protection Act (“BDSG“).

You have the right to receive information about your personal data. You can also require the correction of incorrect data.

In addition, under certain conditions you have the right to the deletion of your data, the right to restriction of the data processing and the right to data portability. You may object to processing on the basis of Art. 6 Para. 1 lit f) GDPR, as well as to any profiling in accordance with Art. 21 GDPR. Consents that you have given in the context of website use can be revoked informally and without giving reasons at any time with effect for the future.

You can assert all of the above rights in accordance with Articles 15 to 21 GDPR informally towards the data controller by email or post.

You also have the right to complain to the competent data protection supervisory authority if you believe that the processing of your data is unlawful. You can find a list of data protection supervisory authorities and their contact details at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have any questions regarding data protection, please feel free to contact our data protection officer:
David Gabel – E-Mail: david.gabel@your-insider.com

General information concerning data protection and processing of personal data can be found at: https://www.dsgvo-support.de

DATA PROTECTION NOTICE FOR LINKEDIN

Welcome to our LinkedIn page.

We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. That’s why we want to inform you accordingly. 

We entered into a Joint-Controllership-Agreement with LinkedIn according to Art. 26 GDPR. You can call up this agreement here:

https://legal.linkedin.com/pages-joint-controller-addendum

1.   Controller

Joint Controllers for operation of this LinkedIn page are: 

a)
LinkedIn Ireland Unlimited Company
Wilton Place,
Dublin 2, Ireland

You can contact LinkedIn’s data protection officer by using this form:
https://www.linkedin.com/help/linkedin/ask/ppq    

and 

b)

RTSB Group
Industriestr. 24
61381 Friedrichsdorf
info@rtsb.de

Our external data protection officer can be contacted via E-Mail:
david.gabel@your-insider.com

2.   Categories of Data, purpose and legal basis

With regard to the data processing by LinkedIn we refer to its data protection notice:

https://www.linkedin.com/legal/privacy-policy

Below we explain the data processing operations we carry out.

a.     Statistical Data

We can retrieve statistical data of different categories via the so-called “Insights” (https://business.linkedin.com/de-de/marketing-solutions/reporting-analytics) 

These statistics are created and provided by LinkedIn. LinkedIn provides us with the following data for a definable period of time for the categories, respectively, job title, company and industry: Number of interactions like Likes, comments, shared posts, clicks, shares, conversion rate, video views of posts on our LinkedIn site.

As a result of the continuous development of LinkedIn, the availability and processing of data changes, wherefore we refer to the data protection notice of LinkedIn for more detailed information.

Legal basis for processing is Art. 6 1 f GDPR. Making our posts and activities more attractive to users is our legitimate interest. For example, we use demographic data for addressing our users in an adjusted way and the preferred visiting hours of the users for optimized scheduling of our posts. Information about the user’s device help us adjusting our posts in appearance.

b.     Interactions with our account

Also, you can interact with our account. For example, you can do that by pressing the “Like” button, sharing or commenting on a post or by directly writing to us.

In case of you interacting with us, we inevitably process your data as we then can see your account and therefore have access to your personal data; this includes your username, profile picture or date or time of your interaction. According to LinkedIn’s terms of use, that every user has agreed to when creating a LinkedIn profile, we can identify subscribers and fans of the page and view their profile as well as their shared content.

These data are information that are only provided through an interaction with our profile. Legal basis for processing is Art. 6 1 b GDPR.

3.   Recipient of data

We would like to point out that LinkedIn might transmit your data to third parties. We cannot influence this, though. You can find more detailed information within the data protection notice of LinkedIn: https://www.linkedin.com/legal/privacy-policy

We only share personal data within our organization if and when necessary for the purposes specified in this privacy notice. We don´t share personal data with any third party outside of our organization unless one of the following circumstances applies.

Art 6 (1) c GDPR

Processing is necessary for compliance with a legal obligation to which the controller is subject.

Recipients of your personal data may be public offices as well as processors, processing the data collected online in our behalf (Webhosts, designer etc.)

4.   Storage period and erasure

You can find information about data storage by LinkedIn in their data protection notice: https://www.linkedin.com/legal/privacy-policy

We store the personal data transmitted to us by you only for the period of time that is necessary to fulfil the purposes for which the data have been transmitted or as long as we are obligated by law to store them. After fulfilment of the purpose and/or after the legal retention period has expired, we either delete or block the data.

5.   Your rights

According to GDPR you have the following rights with regard to your personal data. You can find more detailed information in Art. 15 to 21 GDPR as well as in §§ 32 to 37 German Federal Data Protection Act. 

You have the right to access your personal data. You may also request the rectification of inaccurate data. Under certain conditions you have the right to erasure, the right to restriction and the right to data portability. Further, you have the right to object to processing of personal data which is based on point (e), (f) of Art. 6(1), including profiling based on those provisions. You may withdraw your consent at any time and without giving reasons with effect for the future. 

You may assert these rights directly with the controller. Therefore, informal contact is sufficient. You may send an Email or a letter. 

You also have the right to lodge a complaint with a supervisory authority if you find our processing of your personal data to be inconsistent with applicable data protection law. A list of federal Data Protection Commissioner and contact data can be found here: 

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html  

If processing by LinkedIn is involved, you can directly contact LinkedIn. In particular this is the case when it’s about processing in the scope of the “Insights”.

You can contact LinkedIn via this form:

https://www.linkedin.com/help/linkedin/ask/ppq 

Furthermore, you might send a letter to:

LinkedIn Unlimited Company
Wilton Place
Dublin 2, Ireland

Alternatively, you can of course also contact us, and we forward your request – according to our agreement with LinkedIn as per Art. 26 GDPR – to LinkedIn.

To change your cookie preferences for this site please click here: