PRIVACY POLICY

Welcome to the ROBUSTA-GAUKEL GmbH & Co. KG website. Protecting your personal data and privacy rights is very important to us. This page explains which data we process and for what purposes. If you have any questions or comments about this Privacy Policy, please feel free to contact us.

Content

Preface and selected terms
Controller and Data Protection Officer
Overview
Legal bases for the processing of personal data
Your rights under the General Data Protection Regulation
External hosting and shop system
Automatic server log files
Use of cookies and cookie-like technologies
Cookie Consent Management
Forms, e-mail, telephone and fax
Analysis tools, tracking and advertising
Plugins and Content Delivery Networks
ROBUSTA+ customer portal and app
Direct Marketing and Newsletter
Information for applicants
Online meetings and video conferences with Microsoft Teams
Appearances on social media
Supplementary data protection information for our business partners

1. Preface and selected terms

On the one hand, this Privacy Policy informs the visitors and users of our Internet presence about the online data processing activities in which personal data are processed. On the other hand, you will receive information about our processing activities, which do not primarily take place online.

GDPR stands for the EU General Data Protection Regulation.
BDSG is the abbreviation for the German Federal Data Protection Act (BDSG), as amended.
Personal data are all individual details that allow conclusions to be drawn about a natural person (definition see Art. 4(1) GDPR). These include, for example, names, e-mail addresses, telephone numbers, but also data such as IP addresses or customer numbers.
The processing of personal data includes all processes, for example the collection, storage, transmission, archiving or deletion of personal data (definition Art. 4(2) GDPR).
The data subject within the meaning of data protection law is any natural person whose personal data are processed.
Further definitions can be found in the General Data Protection Regulation, in particular in Art. 4 GDPR (Definitions).

2. Controller and Data Protection Officer

Controller

ROBUSTA-GAUKEL GMBH & CO. KG

Brunnenstraße 36
D-71263 Weil der Stadt (Hausen)

Telephone +49 70 33 53 71 0
Fax +49 70 33 53 71 31

E-mail info@robusta-gaukel.com
Internet http://www.robusta-gaukel.de

Company Data Protection Officer

DSB External Data Protection Officer Stuttgart
Fabian Henkel
Business economist (FH)
Certified Data Protection Officer
Telephone: +49(0)176 32744172
E-mail: info@externer-datenschutzbeauftragter-stuttgart.de
Web: https://www.externer-datenschutzbeauftragter-stuttgart.de

3. Overview

The following content gives you a brief overview of the processing of personal data, more detailed information can be found in the passages presented in detail.

Security on our website

The data transmission processes to our website are encrypted with a current TLS standard. However, as a precautionary measure, we point out that one hundred percent security in electronic data processing is not possible and there is always a residual risk.

Data that you transmit to us

On this page, we process the data you enter yourself. For example, if you create a user account or send us a message via contact form. Depending on the type of form, the purpose of the processing may vary, details can be found in this Privacy Notice.

Automatic server log files

On the other hand, our server automatically records all accesses and thus also IP addresses (log files), this serves to defend against attacks, the analysis of access numbers and smooth operation.

Use of cookies and cookie-like technologies

We use cookies on our website and similar technologies (e.g. local storage, pixels, tags and similar technologies) to provide our website, improve usability, enable certain functions, and carry out range measurements and marketing measures. Further information can be found in this Privacy Notice.

Analysis and tracking tools

In addition to the pure server log files, which also provide us with information about page views, we use analysis tools. These tools give us detailed insights about the visited content of our site, the behavioral flow and, for example, the country from which access has taken place. In order for such services to work, cookies or cookie-like technologies are used, provided this is permitted or you have given your consent.

Plugins and Content Delivery Networks

We use plugins and content delivery networks. Well-known examples of such technologies are the video service Youtube and the map service Google Maps. If such services are integrated via a website, log files are transferred to the services. As a rule, this is your IP address and other metadata, such as the time and date of access. In the context of the use of these technologies, cookies and cookie-like technologies may be used, if this is permitted or if you have given us your consent.

Newsletter / Direct marketing

Direct marketing to existing customers in the legitimate interest

We reserve the right to send our customers newsletters based on §7 Abs. 3 UWG i.V.m Art. 6(1)(f) GDPR. You can of course object at any time to receiving direct marketing information.

Direct marketing based on your consent

If you give us your consent, we will send you newsletters until your revocation. You can revoke your consent to us at any time with effect for the future.

Other recipients

Use of processors

We set according to the specifications of Art. 28 GDPR processors who process personal data on our behalf on instructions. For example, we use processors to provide the website and the webshop, but also as part of customer support. Details can be found in this Privacy Notice.

Use of professional services

If it is necessary (for example, for the execution of the contract), we pass on your data to banks, other payment service providers, shipping service providers, our tax consultant or lawyer, for example.

Legal obligations

We are subject to legal obligations, such as commercial laws or tax law. In this context, we have to pass on certain data to tax authorities, for example, due to legal obligations.

Investigation of crimes

Insofar as it should be necessary for the investigation of a crime, we pass on data to the law enforcement authorities.

General information on deletion periods of personal data

We process the data as long as this is necessary for the respective purpose. Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and processing of a contract, and we are also obliged to comply with legal storage obligations. If the data processing is based on your consent, we will delete your data after your revocation.

Transfer of personal data to a third country

We try as far as possible to have all service providers and services provided by providers within the European Union. A transfer to a third country is possible if you have given us your consent and/or we have a contract for order processing acc. Art. 28 GDPR taking into account suitable guarantees in accordance with Art. 44 ff. GDPR, in particular standard contractual clauses or an adequacy decision.

Legal or contractual obligation to provide personal data

This website can in principle be visited without providing personal data. For purchases in our online shop, it is necessary to provide personal data for the conclusion of a purchase contract.

4. Legal bases for the processing of personal data

The legal bases for processing personal data are statutory provisions that permit such processing. The principal legal bases are set out in particular in Art. 6 GDPR. The legal basis applicable to each processing activity is described in the relevant section of this Privacy Policy.

Consent (Art. 6(1)(a) GDPR)

Consent must be given freely and on an informed basis. Consent granted under Art. 6(1)(a) GDPR may generally be withdrawn at any time without giving reasons.

Contract-related data processing (Art. 6(1)(b) GDPR)

The legal basis for processing personal data for the initiation or performance of contractual relationships is Art. 6(1)(b) GDPR.

Legal obligation (Art. 6(1)(c) GDPR)

In some cases, we process personal data to comply with a legal obligation under Art. 6(1)(c) GDPR. Such obligations include compliance with retention periods under commercial and tax law.

legitimate interests (Art. 6(1)(f) GDPR)

Processing based on a balancing of interests under Art. 6(1)(f) GDPR is permitted after our financial or legal interests have been carefully weighed against the legitimate interests and rights of the data subject. The data subject has the right to object to processing based on legitimate interests.

5. Your rights under the General Data Protection Regulation

Each natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights that you can claim from us.

Right to withdraw consent under Art. 7 GDPR

You can revoke a given consent to us at any time without giving reasons with effect for the future.

Right of access under Art. 15 GDPR (subject to possible restrictions under Section 34 BDSG)

You have the right at any time to request information about the personal data we process about you and the purposes of such processing.

Right to rectification under Art. 16 GDPR

If you find that we process incorrect or incomplete data about you, you have the right to rectification.

Right to erasure under Art. 17 GDPR (subject to possible restrictions under Section 35 BDSG)

You always have the right to request the deletion of your personal data that we process about you. Insofar as a complete deletion is not possible, for example because we have to fulfill legal storage obligations or we can assert legitimate interests for another reason, we restrict your data until these reasons are eliminated.

Right to restriction of processing under Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data. For this you can contact us at any time under the address indicated in the imprint. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
If your personal data have been or are being processed unlawfully, you may request restriction of processing instead of erasure.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have an objection under Art. 21, par. 1 GDPR, a balance must be made between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data, apart from its storage, may only be processed with your consent or in order to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Right to data portability under Art. 20 GDPR

You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place as far as it is technically feasible.

Right to object to certain processing operations and direct marketing under Art. 21 GDPR

If the data processing on the basis of Art. 6(1)(e) or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data concerned, unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (opposition according to Art. 21(1) GDPR).

If your personal data is processed for direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling, insofar as it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (opposition according to Art. 21(2) GDPR).

Right of complaint to a supervisory authority according to Art. 77 DGVO in V. m. § 19 BDSG

In the event of breaches of the GDPR, the persons concerned have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal shall be without prejudice to other administrative or judicial remedies.

6. External hosting and shop system

Our website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the servers of the hoster. These can be IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract vis-à-vis our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider within the framework of our legitimate interests (Art. 6(1)(f) GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions regarding this data.

We have commissioned the following hoster:
wentum Informationstechnologie GmbH

Feldbergstraße 29
75179 Pforzheim

Privacy Notice http://wentum.de/datenschutz.html

Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded a contract for order processing with our hoster.

7. Automatic server log files

Our web server automatically logs all accesses and thus also IP addresses of the visitors. This serves to defend against attacks, analyze access numbers and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).

The server log usually records other metadata about the session in addition to the IP address, these data can be found below.

Date and time of search
Information about the browser type and the browser version used
Details of the operating system used
Device (client)
Refferer URL (through which page you landed with us)
Hyperlinks accessed

We process this data only for the above-mentioned purposes. We delete server log files after four weeks at the latest.

8. Use of cookies and cookie-like technologies

Our website uses cookies and similar technologies, in particular local storage, session storage, pixels, tags and scripts. Cookies are small data packages that are stored on your device. Comparable technologies can also store or read information on your device.

These technologies can be technically necessary or functional or used for analysis and marketing technologies.

Technically necessary cookies and technologies are necessary for our website to function properly. This includes in particular functions for side navigation, shopping cart and order processing, login sessions, security functions and the storage of your data protection settings. The use is based on § 25 Abs. 2 TDDDG. Insofar as personal data are processed here, the processing takes place on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in the secure and functional provision of our website. Insofar as the processing is necessary for the performance of the contract or for the implementation of pre-contractual measures, it takes place on the basis of Art. 6(1)(b) GDPR.

We use functional technologies to provide additional functions and external content. This may include, in particular, embedded videos, map and navigation services or other content and services from third parties. When loading such content, third parties may process information about your usage behavior, your IP address, device information or browser data and store or read cookies or comparable technologies on your device. Insofar as these technologies are not technically necessary, their use is exclusively based on your consent in accordance with § 25 para. 1 TDDDG and Art. 6(1)(a) GDPR.

We use analytics and marketing technologies to statistically evaluate the use of our website, to improve our offer, to display personalized content or advertising and to measure the success of advertising measures. In particular, usage data, device information, pseudonymous identifiers, interactions with our website as well as campaign and conversion data can be processed. The use is exclusively based on your consent in accordance with § 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR.

You can revoke or adjust your consent at any time with effect for the future via the settings of our consent management tool. In addition, you can configure your browser to block or delete cookies. When disabling certain technologies, the functionality of our website may be limited.

Further information on the specifically used services, recipients, storage periods and legal bases can be found in the respective sections of this Privacy Policy.

9. Cookie Consent Management

We use a self-hosted consent management tool on our website.

The Consent Management Tool serves to obtain, manage and document your consents for the use of cookies and comparable technologies as well as for certain data processing in compliance with data protection. This allows us to control which technically not required services and technologies may be used based on your consent.

When accessing our website, Consent Management processes in particular the following information:

Your consents and revocations,
your IP address,
information about your browser and device,
Time stamps, i.e. the date of consent;
information on the accessed consent settings,
a pseudonymous user identifier (consent ID).

The Consent Management also stores information in your browser in order to assign the consents or revocations you have given to your device and to be able to take them into account in later page views.

The processing takes place to fulfill our legal obligations in connection with the use of cookies and comparable technologies as well as to fulfill data protection obligations of proof and documentation. The legal basis for this is Art. 6(1)(c) GDPR in connection with the requirements of § 25 TDDDG. Furthermore, we have a legitimate interest in the use of a legally compliant and user-friendly solution (Art. 6(1)(f) GDPR).

The data collected via Consent Management will in principle be stored until you revoke your consent, delete the stored cookies or local storage contents yourself or the purpose for the storage ceases. The cookie for storing your preferences has a maximum uptime of one year, unless you delete it beforehand.

10. Forms, e-mail, telephone and fax

Message by contact form

You have the possibility to send us messages by contact form. We process the data entered by you in the data collection mask. Mandatory fields are indicated and must be indicated. The purpose of data processing is to process your request and, if necessary, to contact you subsequently. If you send us inquiries via contact form, your information from the inquiry form, including the contact data you provide there, will be stored with us for the purpose of processing the inquiry and in the case of follow-up inquiries. The processing of this data takes place on the basis of Art. 6(1)(b) GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para). 1 lit. f GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time. We store the transmitted data until the purpose of the data storage is achieved or you revoke your consent. Please note that the process may be subject to legal retention periods. In this case, we restrict your data for further processing until its expiration.

Communication by e-mail

If you write us an e-mail, we process your data according to the content and purpose of the message. As a rule, the processing is carried out on the basis of pre-contractual measures or within the framework of the execution of a contractual relationship on the basis of Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. It is a legitimate interest to process your request quickly and efficiently. If it is a product- or performance-related message, we usually process your data on the basis of Art. 6(1)(b) GDPR. Please note that we keep all incoming emails for eight years, in accordance with the principles of proper accounting, starting from the first day of the following year in which the message was received. Insofar as you ask us to delete the data, we will henceforth restrict your data for processing and store it only for the purpose of complying with retention periods in our legitimate interest.

Communication by telephone or fax

Even if you contact us by phone or fax, we process your data either for the initiation and execution of contractual relationships (if the content is product- or performance-related) and/or in our legitimate interest, analogous to the contact by e-mail.

We do not record conversation content, but we may take notes to process your request. This will be stored until the purpose of the data processing is achieved and we no longer have any legitimate interests in the processing. If necessary, content of the conversation is stored anonymously for statistical purposes. Of course, you can request deletion at any time.

11. Analysis tools, tracking and advertising

Google Tag Manager

We use the Google Tag Manager. The provider for users in the European Economic Area and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. More information about Google Tag Manager can be found at https://support.google.com/tagmanager/. Google's privacy policy can be found under https://policies.google.com/privacy?hl=de.

The Google Tag Manager is a tag management system with which we can centrally manage and technically integrate codes and services on our website. The Google Tag Manager is used to manage and display tags and comparable technologies.

To our knowledge, the Google Tag Manager itself does not store cookies on your device and does not create independent user profiles. However, within the framework of the technical provision, a processing of technical connection data, in particular of the IP address, cannot be excluded.

The use of the Google Tag Manager is based on our legitimate interest according to Art. 6(1)(f) GDPR for an efficient, flexible and technically optimized management and integration of services on our website.

Insofar as services are integrated via the Google Tag Manager, which in turn use cookies or comparable technologies or process personal data, these processing operations are carried out on the basis of the necessary consents in accordance with § 25 para. 1 TDDDG and Art. 6(1)(a) GDPR. Information on this can be found in the respective Privacy Notice for the services used.

As part of the use of Google Tag Manager, a transfer of personal data to Google servers in the USA cannot be excluded. The data transmission to the USA takes place in particular on the basis of standard contractual clauses according to Art. 46 GDPR.

Google Analytics

We use on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics allows us to analyze the use of our website as well as the statistical evaluation of user behavior. In particular, information about visited pages, interactions, dwell time, technical information about the used terminal and browser, origin of visitors and usage data can be processed here.

In the context of the use of Google Analytics, the following personal or personal data can be processed in particular:

IP address
Pseudonymous user identifiers
Device and browser information
Operating system
Referrer URL
Accessed pages and interactions
Date and time of page views
Technical connection data
Approximate location information

We use Google Analytics with IP anonymization enabled. This will shorten your IP address by Google within the European Union or the European Economic Area before further processing. Only in exceptional cases is the complete IP address transferred to Google servers in the USA and shortened there.

The use of Google Analytics is based on your consent in accordance with § 25 para. 1 TDDDG and Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future.

Google processes the personal data collected in the context of Google Analytics on the basis of Google Ads Data Processing Terms. However, insofar as additional advertising and marketing functions are activated, in particular Google Signals, Google Ads links or cross-device analyses, Google also processes personal data for its own purposes. This applies in particular to the provision, improvement, personalization and performance measurement of advertising services within the Google network. A processing according to instructions in the sense of a complete processing according to Art. 28 GDPR therefore does not take place in all cases with regard to these processing operations.

As part of the use of Google Analytics, a transfer of personal data to Google servers in the USA cannot be excluded. The data transmission to the USA takes place in particular on the basis of standard contractual clauses according to Art. 46 GDPR.

The data collected by Google Analytics will in principle be stored by us for a maximum period of 14 months and will then be deleted or anonymized, unless there are any legal storage obligations.

Further information about Google Analytics can be found at:
https://support.google.com/analytics/

Google’s privacy policy can be found at:
https://policies.google.com/privacy?hl=de

Google Signals

Google Ads

On our website we use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Ads allows us to place advertisements within the Google advertising network and to analyze and optimize our advertising activities. In particular, information about the use of our website, interactions with advertisements, accessed content and conversion and campaign data can be processed.

In the context of the use of Google Ads, the following personal or personal data can be processed in particular:

IP address
Device and browser information
Referrer URL
Interaction data
Campaign data
Conversion data
Pseudonymous identifiers
Information about usage and surfing behaviour

If users are logged in with their Google account, Google can merge the processed information across devices and link it to other Google services.

The use of Google Ads takes place exclusively on the basis of your consent in accordance with § 25 para. 1 TDDDG and Art. 6(1)(a) GDPR.

Google processes personal data in connection with Google Ads in part as an independent controller. This applies in particular to advertising, remarketing, personalization, analytics and cross-device functions within the Google advertising network. A processing exclusively after instructions in the sense of a complete processing according to Art. 28 GDPR therefore does not take place in all cases.

With Google, the Google Ads Data Processing Terms as well as the Google Ads Controller-Controller Data Protection Terms.

As part of the use of Google Ads, a transfer of personal data to Google servers in the USA cannot be excluded. The data transmission to the USA takes place in particular on the basis of standard contractual clauses according to Art. 46 GDPR.

Further information about Google Ads can be found at:
https://support.google.com/google-ads/

Google’s privacy policy can be found at:
https://policies.google.com/privacy?hl=de

Google Ads Conversion tracking

We use on our website Google Ads Conversion Tracking by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Ads Conversion tracking allows us to understand whether users perform certain actions on our website after interaction with a Google ad. This allows in particular conversions, purchases, contact requests or other defined user actions to be statistically evaluated.

In particular, the following data can be processed:

IP address
Device and browser information
Referrer URL
Conversion data
Interaction data
Campaign data
Pseudonymous identifiers

The use of Google Ads Conversion tracking takes place exclusively on the basis of your consent in accordance with § 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR.

Google processes personal data in connection with Google Ads Conversion tracking partly also as an independent responsible person. A processing exclusively after instructions in the sense of a complete processing according to Art. 28 GDPR therefore does not take place in all cases.

With Google, the Google Ads Data Processing Terms as well as the Google Ads Controller-Controller Data Protection Terms.

In the use of Google Ads Conversion tracking cannot exclude the transfer of personal data to Google servers in the USA. The data transmission to the USA takes place in particular on the basis of standard contractual clauses according to Art. 46 GDPR.

Google Ads Remarketing

On our website we use remarketing of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Remarketing allows us to show users of our website interest-based advertising within the Google advertising network. Here, users can be recognized, target groups created and personalized advertisements can be played out.

If users are logged in with their Google account, Google can merge the processed information across devices and link it to other Google services.

In the context of remarketing, in particular cookies, pseudonymous identifiers, device information, usage data, interaction data and information about surfing and purchasing behavior can be processed. Here, technologies of the Google Marketing Platform or formerly DoubleClick can also be used.

The use of Google Ads Remarketing takes place exclusively on the basis of your consent in accordance with § 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR.

Google processes personal data in connection with Google Ads Remarketing partly as an independent responsible person. This applies in particular to advertising, remarketing, personalization, analytics and cross-device functions within the Google advertising network. A processing exclusively after instructions in the sense of a complete processing according to Art. 28 GDPR therefore does not take place in all cases.

With Google, the Google Ads Data Processing Terms as well as the Google Ads Controller-Controller Data Protection Terms.

In the use of Google Ads Remarketing cannot exclude the transfer of personal data to Google servers in the USA. The data transmission to the USA takes place in particular on the basis of standard contractual clauses according to Art. 46 GDPR.

Further information on Google’s privacy policy can be found at:
https://policies.google.com/privacy?hl=de

12. Plugins and Content Delivery Networks

YouTube

This website integrates videos of the website YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our websites on which YouTube is integrated, a connection to the servers of YouTube is established. The YouTube server will be informed which of our pages you have visited. Furthermore, YouTube may store various cookies on your device or use similar recognition technologies (e.g. device fingerprinting). In this way, YouTube may receive information about visitors to this website. This information is used, inter alia, to collect video statistics, improve user-friendliness and prevent fraud. When you are logged into your account, you allow your surfing behavior to be directly related to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is based on your consent according to Art. 6(1)(a) GDPR and § 25 para. 1 TDDDG. The consent is revocable at any time.

Further information on the handling of user data can be found in the privacy policy of YouTube at: https://policies.google.com/privacy?hl=de.

Font Awesome

Google reCAPTCHA

On our website we use the service Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA serves to protect entries on our website, in particular in forms, from abusive automated use, spam and attacks by bots.

For this purpose, Google processes technical information and interaction data on our behalf in order to be able to assess whether an input is made by a human or by an automated program. In particular, the IP address, browser and device information, operating system, referrer URL, date and time of access, interactions with the website and, if necessary, further technical signals can be processed.

According to Google, it has processed reCAPTCHA data as a processor under the Google Cloud Terms of Service and the Google Cloud Data Processing Addendum since 2 April 2026. We are responsible for the use of reCAPTCHA and have entered into the required data protection agreements with Google.

The processing takes place to protect our website and our IT systems as well as to prevent spam, abuse and automated attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the functionality, integrity and security of our website. As far as cookies are set by reCAPTCHA or information is read out from the terminal, this is done on the basis of § 25 Abs. 2 No. 2 TDDDG, insofar as the use is necessary for the provision of a form expressly desired by the user or for securing the communication. If reCAPTCHA is also used for analysis or marketing purposes or loaded in advance without a specific security requirement, the use is only based on consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25 Abs. 1 TDDDG. The consent can be revoked at any time with effect for the future.

A transfer of personal data to Google LLC in the USA cannot be excluded. Google is certified under the EU-U.S. Data Privacy Framework. Further information on data processing by Google can be found at: https://policies.google.com/privacy and to reCAPTCHA under: https://cloud.google.com/security/products/recaptcha

ROBUSTA+ customer portal and app

We provide our customers and interested users with the customer portal ROBUSTA+. ROBUSTA+ can be used via the website robustaplus.com as well as via the ROBUSTA+ app. The app is essentially another way to access the ROBUSTA+ customer portal.

ROBUSTA+ serves to centrally provide and manage construction site information, material and article data and associated service functions. Through ROBUSTA+, users can in particular retrieve information on construction sites, construction projects, articles, rental start and rental end, individual and total goods values as well as technical documents. In addition, service requests can be made via ROBUSTA+, in particular for pick-up, purchase acceptance, re-ordering or reporting of loss or loss. Defect. In addition, contact persons can be contacted and request overviews, for example as a return delivery note, can be created or printed.

Registration, testing and activation

Registration is required for the use of ROBUSTA+. After registration, we check whether the user is already a customer or proves a legitimate interest in the use of ROBUSTA+. An activation takes place only after a corresponding test.

In the context of registration, testing and activation, we process in particular the following data:

name and business contact details of the user,
enterprise and business classification;
information about the customer relationship or the interest claimed,
access data and user identification;
status of registration and activation,
internal audit and release to service reports;
Date of registration and activation.

The processing takes place to set up and manage the user account, to check the authorization of use, to prevent unauthorized accesses and to provide the customer portal.

The legal basis is Art. 6(1)(b) GDPR, insofar as registration and activation is necessary for the execution of a contract or for the execution of pre-contractual measures. If users act as employees or contact persons of a customer company or another legitimate interest is examined, the processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the controlled provision of ROBUSTA+, the verification of the access authorization and the protection of the customer, construction site and contract information contained in the portal.

Use of the customer portal

As part of the use of ROBUSTA+, we process in particular the following personal data:

names and business contact details of users and contact persons,
business, customer, construction site, project and construction project allocations,
user accounts, login data, roles and permissions,
service requests, communication content and processing statuses,
information on items, rental periods, value of goods and transactions, insofar as they can be attributed to a natural person;
technical usage, access and protocol data in connection with the use of the customer portal or the app.

The processing takes place for the provision and use of ROBUSTA+, for the management of user accounts and authorizations, for the display and management of construction site, project, article and rental information, for the processing of service requests and for communication with our customers and their contacts.

The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for the implementation of a contract or for the implementation of pre-contractual measures. Insofar as personal data are processed by employees or contact persons of our customers, the processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of the customer relationship, the provision of a digital customer portal, the comprehensible processing of service requests and the secure and role-based provision of construction site and contract information.

As far as customer companies can create users themselves or manage authorizations, they are responsible for authorizing only those persons who are authorized to access ROBUSTA+ and the information provided there.

Use via the ROBUSTA+ app

The ROBUSTA+ app provides a mobile access route to the ROBUSTA+ customer portal. When using the app, additional device-related technical data that is necessary for the provision, security and functionality of the app can be processed. This can include in particular device type, operating system, app version, language settings, technical error data and access times.

As far as the app requires access to functions of the terminal, such as memory, files, camera, location or push notifications, access only takes place if this is necessary for the respective function and the corresponding authorization has been granted via the terminal. Granted permissions can be revoked at any time in the settings of the terminal device.

Storage time

Personal data will only be stored for as long as this is necessary for the provision of ROBUSTA+, the examination and management of the use authorization, the execution of the contract, the processing of the respective request or the fulfilment of legal storage obligations.

Registration data will be deleted or blocked if no activation takes place and no further communication or legal retention is required. User accounts are deleted or deactivated if they are no longer needed for the use of the portal, the contractual relationship ends or the customer company deletion or deactivation. Deactivation is required insofar as there are no legal storage obligations or legitimate reasons for further storage. They can also delete their user account themselves at any time.

14. Direct Marketing and Newsletter

Direct marketing to existing customers in the legitimate interest

Langenmüller Verlag reserves the right to collect the data collected on the occasion of a purchase contract or service contract. for direct advertising by e-mail or by post in accordance with § 7 Abs. 3 UWG if the customer has not objected or objected to this use. Direct advertising only includes offers for similar products or services, such as the products or services already purchased from us by the user. We use your data for up to five years after the last purchase for direct marketing purposes in the legitimate interest.

We have a legitimate economic interest (Art. 6(1)(f) GDPR) in informing our customers about new products and improving our services. Of course, you can object to receiving direct marketing at any time. Send your objection to the controller mentioned above. You will also find information in each newsletter on how to assert your objection. In each newsletter you will find a link with which you can object to receiving the newsletter. Alternatively, please address your objection to info@robusta-gaukel.com.

15. Information for applicants

If you apply to us, whether for an advertised position or on its own initiative, we process your data to carry out the selection process. It is irrelevant to us whether you apply by post, by e-mail or, if available for the respective job, by online form. In principle, in the context of an application procedure, only the data that you have transmitted to us yourself is processed. The use of further sources is at best considered after information and consultation with you. For example, whether we can turn to a former employer. The legal basis for carrying out an application procedure is §26 BDSG i.v.m Art. 6(1)(b) GDPR (initiation of employment contract). Insofar as you give us your consent for the longer-term storage of your data, this is done on the legal basis Art. 6(1)(a) GDPR.

Deletion deadlines for applicant data

We delete applicant data a maximum of 4 months after completion of the application process (if the selection of a candidate has been made and all applicants have been informed about the outcome). The purpose of data processing is basically no longer given at the end of the selection process, but we have a legitimate interest (Art. 6(1)(f) GDPR) in being able to defend ourselves against any claims of rejected applicants. If you have the impression that your interests in an immediate deletion outweigh, you have the possibilities to ask us to do so. We will then examine your request and give you feedback.

After the expiry of the above-mentioned period, your data will be deleted, unless we have to defend ourselves, for example, in an ongoing procedure, for example due to a claim under the General Equal Treatment Act. In this case, we will delete your data after completion of the procedure, unless there are any statutory retention periods.

If we may store your data on the basis of your consent in the longer term, we will delete your data if you ask us to do so and withdraw your consent. We may also delete your data before revoking your consent if it is foreseeable that no position will be available.

Admission to our applicant pool

If we cannot offer you a job at this time, we may ask you for your consent to further storage of your data. This serves the purpose of offering you a suitable job at a later date. The legal basis for the processing of your data in our applicant pool is your consent (Art. 6 Aba. 1 lit. a GDPR). Of course, you can revoke your consent at any time with effect for the future. If you do not revoke your consent yourself within a period of two years, we will delete your data from our applicant pool at the latest.

16. Online meetings and video conferences with Microsoft Teams

We use Microsoft Teams to conduct online meetings, video conferencing, webinars and other digital communication formats. Provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When using Microsoft Teams, depending on the type and extent of participation, the following data are processed in particular: name and contact data, display name, meeting metadata such as date, time, duration, participant, meeting ID and technical connection data, IP address, device and browser information as well as content data, if these are submitted within the framework of the conference. This can include in particular audio and video data, chat messages, shared content, files and contributions during the meeting.

The processing takes place for the planning, implementation and follow-up of the respective online meeting or event. The legal basis is Art. 6(1)(b) GDPR, insofar as participation takes place for the implementation of a contract or pre-contractual measures. In other cases, the processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient implementation of digital communication, meetings and events. As far as special categories of personal data within the meaning of Art. 9 GDPR is voluntarily disclosed, this is done by the participant himself in the context of the conference.

Microsoft generally processes the data within the framework of the Microsoft 365 services as a processor based on the Microsoft Data Protection Addendum. We have concluded the necessary data protection agreements with Microsoft.

A recording of Microsoft Teams conferences takes place only if this has been expressly stated in advance and a corresponding legal basis exists. Participants can restrict the transmission of audio and video data by deactivating the camera and microphone. Where possible, a neutral display name may also be used.

A transfer of personal data to Microsoft companies or service providers outside the European Union or The European Economic Area cannot be completely excluded. Microsoft provides suitable guarantees for this, in particular standard contractual clauses. Further information on data processing by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement

17. Appearances on social media

We maintain publicly accessible profiles on social networks. The social networks we use in detail can be found below.

Social networks such as Facebook, Twitter, etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). Visiting our social media presences triggers numerous data protection-relevant processing activities. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. In this way, interest-related advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or were logged in.

Please also note that we cannot track all processing activities on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media presences should ensure as comprehensive a presence as possible on the Internet. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent in the sense of the art). 6 para 1 lit. a GDPR.

Responsible and asserting rights

If you visit one of our social media sites (e.g. Facebook), we are responsible together with the operator of the social media platform for the data processing activities triggered during this visit. In principle, you can assert your rights (information, rectification, deletion, restriction of processing, data portability and complaint) both to us and to the operator of the respective social media portal (e.g. Facebook).

Please note that despite joint responsibility with the social media portal operators, we do not have full influence on the data processing activities of the social media portals. Our options are largely based on the company policy of the respective provider.

Storage time

The data collected directly by us via our social media presence will be deleted by our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage ceases. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular. Storage periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their Privacy Policy, see below).

Social networks in detail

Google / Youtube

18. Supplementary data protection information for our business partners

Data categories and purposes of processing

We process personal data of our service providers and partners, which we receive directly as part of our business relationship. If we have received data from you, we will only process it for the purposes for which we have received or collected it.

As a rule, we process the following data categories from you:

Surname, first name
Address and/or company address
Telecommunications data
Email address
Company
Professional function and/or position
Bank details/other payment details
Data on the history of the business relationship

During the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data arises, e.g. information about contact channel, date, occasion and result; (electronic) copies of correspondence and information on participation in direct marketing activities.

On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. commercial and association registers, press, media, Internet).

Data processing for other purposes is only considered if the legal requirements required in this respect in accordance with Art. 6(4) GDPR is available. Any information obligations pursuant to Art. 13(3) GDPR and Art. 14(4) GDPR we will of course observe in this case.

Legal basis according to which we process your data

Based on your consent (Art. 6(1)(a) GDPR)
We process personal data for one or more specific purposes if you have given us consent to do so. If personal data is processed on the basis of your consent, you have the right to withdraw the consent at any time with effect for the future to us.

Data processing for the fulfilment of contracts (Art. 6(1)(b) GDPR)
We process personal data for the fulfilment of contracts. The fulfillment of contracts includes, for example, the conclusion, processing and reversal of a contract. In addition, we process personal data that are necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and are carried out on your request.

Data processing based on a legal obligation (Art. 6(1)(c) GDPR)
Like any company, we have to comply with retention requirements and other documentation requirements, this can also affect documents containing personal data. Insofar as we process data for these purposes, the processing takes place on the basis of a legal obligation.

Data processing based on a weighing of interests (Art. 6(1)(f) GDPR)
If we process data on the basis of a weighing of interests, you as the data subject have the right, taking into account the requirements of Art. 21 GDPR to object to the processing of personal data. As far as the specific purpose permits, we process your data pseudonymised or anonymised.

Further recipients of your data

Transfer to processors under the Art. 28 GDPR

Processors used by us (Art. 28 GDPR), in particular in the field of IT services and, for example, printing services, which process your data for us on the basis of instructions. If we commission service providers to fulfill our tasks, we always observe the data protection regulations, in particular a transfer takes place only after conclusion of contracts for order processing. We are happy to inform you which processors we use.

For the performance of a contractual relationship

If it is necessary for the execution of the contract with you, we will pass on your data, for example, to our bank for the processing of payments or shipping service providers, such as Deutsche Post, DHL, UPS, GSL, DPD or other event-related providers.

Transfer under a legal obligation

If there is a legal or official obligation, we will pass on your data to public authorities or institutions (authorities, for example, in the context of criminal prosecution).

Other entities insofar as you have given us consent

If explicit consent is given, we will also pass on your data to other agencies. However, this takes place within the limits if you have a demonstrable consent.

Information on deletion periods of personal data

Principle of purpose limitation and compliance with statutory retention periods
We process the data as long as this is necessary for the respective purpose. Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and processing of a contract.

In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as statutory storage obligations exist, the relevant personal data are stored for the duration of the storage obligation. The storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 et seq. of the Civil Code (BGB) can generally be three years, but in certain cases up to thirty years. After the expiry of the storage obligation, it is checked whether there is a further necessity for the processing. If a necessity no longer exists, the data are deleted.

As a rule, such retention periods in the context of legal transactions (according to §147 AO / §257 HGB / §14b UstG) are 10 years, starting with the year following the legal transaction.

Withdrawal of your consent

Insofar as we have your data based on your Consent (Art. 6(1)(a) GDPR), we delete them according to your Revocation. Unless there is a legitimate interest against a complete deletion. For example, we generally keep a declaration of consent for up to three years after receipt of your revocation in the legitimate interest (Art. 6(1)(f) GDPR). We retain the consent exclusively with restriction of processing in order to be able to defend ourselves in the event of a dispute.

Legal or contractual obligation to provide personal data

The provision of personal data is regularly necessary for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, it is not possible for us to conclude and perform a contract with you.

Transmission to a third country

Your personal data is generally processed by us in data centers of the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or we have a contract for order processing acc. Art. 28 GDPR taking into account suitable guarantees or other suitable guarantees according to Art. 44 GDPR ff.