Privacy Policy

This Privacy Policy informs you about how we handle your data. To ensure that you understand how your data is processed, we would like to provide you with an overview of these processing activities through the following information. To ensure fair processing, this Privacy Policy contains general information about how we handle your data, as well as information about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We also provide you with detailed information about

1. General Information
2. Data Processing on Our Website
3. Additional Data Processing

ROWASOL GmbH, Siemensstraße 1-3, 25421 Pinneberg (hereinafter referred to as “we” or “us”) is responsible for data processing.

1. Contact
If you have any questions or suggestions regarding this information, or if you would like to contact us to exercise your rights, please direct your inquiry to

ROWASOL GmbH
Siemensstraße 1-5
25421 Pinneberg
Phone: +49-4101 706-04
Email: info(at)rowasol.de

You can contact our Data Protection Officer using the following contact information:
datenschutz(at)rowa-group.com

2. Legal Basis
The term “personal data” as used in data protection law refers to all information relating to an identified or identifiable individual.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We process data only on the basis of legal authorization. We process personal data only with your consent (Art. 6(1)(a) GDPR), to fulfill a contract to which you are a party, or at your request to take steps prior to entering into a contract (Art. 6(1)(b) GDPR), to comply with a legal obligation (Art. 6(1)(c) GDPR), or when processing is necessary to protect our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not take precedence (Art. 6(1)(f) GDPR).

3. Duration of Storage
Unless otherwise specified in the following information, we store the data only for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such statutory retention obligations may arise, in particular, from commercial or tax law provisions.

4. Recipients of the Data
We use contracted service providers for specific processing activities. These include, for example, hosting, maintenance, and support of IT systems, marketing activities, or the destruction of files and data storage media. These service providers process the data only in accordance with our express instructions and are contractually obligated to ensure appropriate technical and organizational measures for data protection. In addition, we may transfer our customers’ personal data to entities such as postal and delivery services, payment and information services, our primary bank, tax advisors/auditors, or tax authorities.

5. Processing in Connection with the Exercise of Your Rights Under Articles 15 through 22 of the GDPR
If you exercise your rights under Articles 12 through 22 of the GDPR, we will process the personal data you provide for the purpose of implementing those rights and to be able to provide evidence thereof. We will process data stored for the purpose of providing information and preparing such responses solely for this purpose and for data protection audit purposes; otherwise, we will restrict processing in accordance with Article 18 of the GDPR.
This processing is based on the legal basis of Article 6(1)(c) of the GDPR in conjunction with Articles 15 through 22 of the GDPR and Section 34(2) of the BDSG.

6. Your Rights
As a data subject, you have the right to exercise your data subject rights with us. In particular, you have the following rights:

• Pursuant to Article 15 of the GDPR and Section 34 of the BDSG, you have the right to request information regarding whether we process personal data about you and, if so, to what extent.
• You have the right to request that we correct your data in accordance with Article 16 of the GDPR.
• You have the right to request that we delete your personal data in accordance with Article 17 of the GDPR and Section 35 of the BDSG.
• You have the right to have the processing of your personal data restricted in accordance with Article 18 of the GDPR.
• In accordance with Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
• If you have provided us with separate consent to the processing of your data, you may revoke this consent at any time in accordance with Article 7(3) of the GDPR. Such a withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.
• If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.

7. Right to Object
Pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on the legal grounds of Article 6(1)(e) or (f) of the GDPR, for reasons arising from your particular situation. If we process your personal data for the purpose of direct marketing, you may object to such processing in accordance with Article 21(2) and (3) of the GDPR.

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, an IP address is generally considered personal data. An IP address is assigned to every device connected to the Internet by the Internet service provider so that it can send and receive data.

1. Processing of Server Log Files
When you use our website for informational purposes only, general information that your browser transmits to our server is initially stored automatically (i.e., without registration). By default, this includes: browser type and version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code. This processing is carried out to safeguard our legitimate interests and is based on the legal basis of Article 6(1)(f) of the GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after 14 days, unless there are concrete indications giving rise to a legitimate suspicion of unlawful use, in which case further examination and processing of the information is necessary for this reason. We are unable to identify you as a data subject based on the stored information. Articles 15 through 22 of the GDPR therefore do not apply pursuant to Article 11(2) of the GDPR, unless you provide additional information that allows for your identification in order to exercise your rights set forth in those articles.

2. Contact Information and Inquiries
Our website includes a contact form that you can use to send us messages. Your data is transmitted in encrypted form (as indicated by “https” in the browser’s address bar). All data fields marked as required are necessary to process your request. Failure to provide this information will prevent us from processing your request. The provision of additional data is voluntary. Alternatively, you can also send us a message via our contact email address. We process the data for the purpose of responding to your inquiry. If your inquiry relates to the conclusion or performance of a contract with us, the legal basis for data processing is Article 6(1)(b) of the GDPR. Otherwise, we process the data based on our legitimate interest in contacting individuals who submit inquiries. In such cases, the legal basis for data processing is Article 6(1)(f) of the GDPR.

3. Cookies
We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser you are using and allows our web server to recognize it. To the extent that this use of cookies involves the processing of personal data, such processing is based on the legal basis of Article 6(1)(f) of the GDPR. This processing serves our legitimate interest in making our website more user-friendly, effective, and secure. We use so-called “session cookies,” which are deleted when you close your browser session. You can delete cookies at any time in your browser’s security settings. You can object to the use of cookies either generally or in specific cases through your browser settings. Further information on this topic is available from the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html.

1. Contractual Relationship
In order to establish or fulfill the contractual relationship with our customers, it is regularly necessary to process the contact information of the relevant contacts that is provided to us. This processing serves our legitimate interest in ensuring smooth business operations. The legal basis for this processing is Article 6(1)(f) of the GDPR. In addition, we process customer and prospect data for analysis and marketing purposes. This processing is carried out on the legal basis of Article 6(1)(f) of the GDPR and serves our interest in further developing our offerings and providing you with targeted information about offers from ROWA GROUP Holding GmbH. Further data processing may take place if you have given your consent (Article 6(1)(a) of the GDPR) or if it is necessary to comply with a legal obligation (Article 6(1)(c) of the GDPR).

2. Job Applications
When you apply for a position with our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will be reviewed and processed only by the relevant contacts within our company. All employees entrusted with data processing are obligated to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you submitted for up to six months following any rejection for the purpose of answering questions related to your application and rejection. This does not apply if legal provisions preclude deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer-term storage. The legal basis for data processing is Section 26(1), Sentence 1 of the German Federal Data Protection Act (BDSG). If we retain your applicant data for a period exceeding six months and you have expressly consented to this, we would like to inform you that this consent may be freely revoked at any time in accordance with Article 7(3) of the GDPR. Such a revocation does not affect the lawfulness of the processing that took place prior to the revocation on the basis of your consent.

3. Offline Orders
If you order a product using our order form or by phone, we process personal data solely for the purpose of fulfilling the contract or to provide you with the product you ordered. As part of the ordering process, we process only the data that you yourself have provided. In order to deliver the products you have ordered, we transmit the data required for delivery to one of our shipping service providers, as specified in the order. The legal basis for this processing is Article 6(1)(b) of the GDPR. All data fields marked as required are necessary to process your order. Failure to provide this information will result in our inability to process your order. The provision of any additional data is voluntary.

4. LinkedIn Company Page
LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is generally the sole controller responsible for the processing of personal data when you visit our LinkedIn page. For more information about LinkedIn’s processing of personal data, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

When you visit our LinkedIn company page, follow this page, or interact with it, LinkedIn processes personal data to provide us with statistics and insights in an anonymized form. This gives us insights into the types of actions people take on our page (so-called Page Insights). To this end, LinkedIn processes, in particular, data that you have already provided to LinkedIn through the information in your profile, such as data regarding your job title, country, industry, years of experience, company size, and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page. LinkedIn does not provide us with any of your personal data through Page Insights. We only have access to aggregated Page Insights. Furthermore, we are unable to draw conclusions about individual members based on the information in Page Insights. This processing of personal data in connection with Page Insights is carried out by LinkedIn and us as joint controllers. This processing serves our legitimate interest in analyzing the types of actions taken on our LinkedIn company page and in improving our company page based on these insights. The legal basis for this processing is Article 6(1)(f) of the GDPR. We have entered into an agreement with LinkedIn regarding processing as joint controllers, which defines the allocation of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum. The following applies:

• LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn via the following link (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) Contact us online or reach out to LinkedIn using the contact information in the Privacy Policy. You can contact the Data Protection Officer at LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You may also contact us using the contact information provided to exercise your rights regarding the processing of personal data in connection with Page Insights. In such cases, we will forward your request to LinkedIn.
• LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority responsible for overseeing the processing of Page Insights. You always have the right to file a complaint with the Irish Data Protection Commission (see below www.dataprotection.ie) or with any other supervisory authority.

Please note that, in accordance with LinkedIn’s Privacy Policy, personal data may also be processed by LinkedIn in the United States or other third countries. LinkedIn transfers personal data only to countries for which the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR or on the basis of appropriate safeguards pursuant to Article 46 of the GDPR.