Data protection declaration
I.Name and contact details of the body in control of the data (‘the controller’) and of the data protection officer
1. The controller
This data protection policy applies to data processing by the following controller:
Renfert GmbH (hereinafter referred to as "Renfert")
Untere Giesswiesen 2
78247 Hilzingen
Germany
Email: info@renfert.com
Phone: +49 (0) 77 31 82 08 0
Renfert, alone or jointly with others, determines the purposes and means of processing the personal data (e.g. names, contact information, etc.).
2. Data protection officer
Renfert has designated an external data protection officer:
Attorney Sebastian Schneller
Daub Patent and Law Attorneys
Bahnhofstr. 5
88662 Überlingen
Germany
Email: sebastian.schneller@kanzlei-daub.de
Phone: +49 (0)7551 301 999 10
II. The collection and storage of personal data and the nature and purpose for which it is used
1. When visiting the website
When you visit the website www.renfert.com, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected without you performing any action and stored until its automatic deletion:
- IP address of the requesting computer
- Date and time of accessing the site
- Name and URL of the requested file
- Website from which the site was accessed (referrer URL)
- The browser used and, if applicable, the operating system of your computer as well as the name of your access provider
We process the abovementioned data for the following purposes:
- Ensuring a trouble-free connection to the website
- Ensuring the convenient use of our website
- Evaluating the security and stability of the system
- Further administrative purposes
The legal basis for processing the data is Article 6 (1) (f) of the General Data Protection Regulation (hereinafter referred to as the "GDPR"). Our legitimate interests arise from the data collection purposes listed above. We will not under any circumstances use the collected data for the purpose of drawing conclusions about you as an individual.
In addition, we use cookies and analysis services when our website is visited, see Clause IV. and V. of this data protection policy for further information.
2. When registering for our newsletter
If you have given your express consent in terms of Article 6 (1) (a) of the GDPR, we will use your e-mail address to regularly send you our newsletter. In order to receive the newsletter, the provision of an e-mail address is sufficient.
You can unsubscribe at any time by using the link at the end of each of our newsletters. Alternatively, you can also send your unsubscribe request to info@Renfert.com by e-mail.
3. When using our contact form
If you have any questions or wish to contact us, you have the option of using a form on our website to contact us. You need to provide your name and a valid e-mail address so that we know who made the request and are able to reply. Further information can be provided voluntarily.
The data processing takes place in terms Article 6 (1) (a) of the GDPR based on your voluntary consent for the purpose of contacting us.
After completion of your request, the personal data collected by us for using the contact form will be automatically deleted at the end of any retention periods.
4. Repair Order Form
If you would like to place a repair order, you have the option of using a corresponding form on our website to contact us. You need to provide your name, address, and a valid e-mail address so that we know who has made the request, are able to process the request, and are able to reply to it. Further information can be provided voluntarily.
The data processing takes place in terms Article 6 (1) (a) of the GDPR based on your voluntary consent for the purpose of contacting us in relation to a repair.
After completion of your request, the personal data collected by us for using the contact form in relation to a repair will be automatically deleted at the end of any retention periods.
5. Wish list / Shopping list
If you would like to use our "Wish list" function, in order to receive information about products (favorites) that are of interest to you, you have the option of downloading a PDF as well as the specific option of receiving an e-mail. If you wish to receive your favorites list by e-mail, we require your e-mail address so that we can send the relevant e-mail to you. Further information can be provided voluntarily.
The processing of the personal data collected about you takes place in terms Article 6 (1) (a) of the GDPR based on your voluntary consent.
After sending the e-mail, the personal data collected by us to send the wish list will be automatically deleted at the end of any retention periods.
6. Online job applications
In addition, you have the option of submitting a job application via our website. For this, we use the online application server tool of Sage GmbH in Frankfurt am Main. This tool is hosted on a server managed by Sage GmbH. The data entered by you will be temporarily stored. For a job application, we require your full address as well as your e-mail address and telephone number (for further correspondence). We will also require further information from you for the assessment and selection, which we will inform you of accordingly. All correspondence in relation to the selection of personnel is stored by us electronically.
The processing of the personal data collected about you takes place in terms Article 6 (1) (a) of the GDPR based on your voluntary consent.
The personal data collected by us for the recruitment process will be deleted after the completion of the recruitment process and the end of any retention periods.
7. Registration for courses
If you would like to register for a course, you will be redirected within our website to our booking tool that is provided by Etzensperger Informatik AG (Switzerland) (hereafter referred to as "edoobox"). In this event, the data entered on our website is transferred to the edoobox servers. The transfer of data to Switzerland is generally permissible in terms of an adequacy decision by the EU Commission. In addition, we have concluded a contract with edoobox to process the orders.
In respect of the binding registration for a course, we require your full address (billing address) as well as your e-mail address and telephone number. We will send all the documents, e.g. the booking confirmation and invoice, to you by e-mail to the specified e-mail address. Providing your telephone number is important in the event that there are queries regarding your registration or for any last-minute information before the start of the course.
Payment of the course fees is by credit card via an external service provider. We use Stripe provided by Stripe Inc. in the USA for this (hereinafter referred to as "Stripe"). Stripe is certified in terms of Privacy Shield and thereby ensures that it complies with the data protection requirements. In particular, Stripe has published the following information on the type, scope, and purpose of its data processing under "Privacy Policy" (https://stripe.com/de/privacy) and in its entry in the Privacy Shield List (https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4).
The processing of the personal data collected about you takes place in terms Article 6 (1) (b) and (f) of the GDPR. The consent to receive information about the products or activities of Renfert GmbH is optional and can be revoked at any time.
8. Access via Login
It is possible to register as a dealer in the dealer area on our website. In order for us to be able to create an account for you, the following personal data must be provided in the registration form: first name, last name, and e-mail address.
The processing of the personal data collected about you takes place in terms Article 6 (1) (a) of the GDPR based on your voluntary consent.
The personal data collected by us for the purpose of sending you your registration confirmation and login data will, after the e-mail has been sent, only be retained for the purpose of managing your dealer account. If you no longer wish to use our protected dealer area, you can cancel your registration at any time and your data will be automatically deleted at the end of any retention periods.
9. Direct chat or chat bot or virtual chat assistant
You can contact us directly via direct chat/chat bot/virtual chat assistant. You do not have to provide any personal data when using this function. If you do provide personal data, the processing of the personal data collected is based on your voluntarily given consent according to Art. 6 para. 1 sentence 1 lit. a of the GDPR or the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject, according to Art. 6 para. 1 sentence 1 lit. b of the GDPR.
Direct chat/chat bot/virtual chat assistant serves as a sales channel and helps you find information on our website. It knows the content of the website and provides keyword-based answers to customer questions, makes link recommendations to relevant websites, or recommends customer contact via another channel. In addition, direct chat/chat bot/virtual chat assistant can research a dealer for you after you enter a location, country or other geographic information. You can also use this system to ask questions about the processing of orders or other inquiries, such as those relating to transport damage. Contact details and, for example, the delivery note number must be provided for this purpose. Finally, there is also the option to register with one of our portals via our direct chat/chat bot/virtual chat assistant (see above for further information).
In principle, it is not necessary to enter personal data in order to use the chatbot. In order to optimize the functionality using autonomous learning, customer inquiries are stored for 1 month. This may also affect the personal data that you have entered. This is not analyzed. Information such as chat duration, timestamps of messages, number of dialogs and approximate location of users are stored anonymously for statistical purposes only.
10. Renfert CONNECT App / Renfert CONNECT stick
It is possible to make some of our units "smart" using our "Renfert CONNECT app" and "Renfert CONNECT Wi-Fi adapter". For details on which units are included, check the information for the respective unit. In order for us to be able to offer you this service, we require the following personal data that must be provided during the registration process: first name, last name, address, and e-mail address of the Renfert CONNECT app user.
In addition, the serial numbers of the corresponding Renfert units are required for use so that they can be linked to the "Renfert CONNECT app".
We capture information on language settings, the country in which the units are being operated, the status of the user account, sensor data for the corresponding units including unit settings, unit status data including environmental conditions, statuses of components, status changes in the unit, status notifications from the unit as well as fault notifications, individual settings on the unit, as well as video and image data.
When capturing sensor data, we cannot exclude that information might also be captured that may allow conclusions to be drawn concerning the health of customers of Renfert CONNECT app users or of Renfert CONNECT app users themselves. It is not possible for us to correlate this data to the customers of Renfert CONNECT app users. However, we do reserve the right to initially analyze this data for statistical purposes.
It is possible to interact with your mobile device and the "Renfert CONNECT app" and, for example, also to use the camera in your mobile device to take pictures, and possibly to use data from additional sensors of your mobile device and to integrate this in the "Renfert CONNECT app", and to share information from the "Renfert CONNECT app". Due to the requirements of the operating system, please note that as a user of the "Renfert CONNECT app", you must regularly give your explicit consent to the use of the camera provided in your mobile device before using for the first time. The same applies for the other sensors of the mobile device. If you share data from the "Renfert CONNECT app", please be aware that as a user, you are responsible for compliance with data protection regulations.
The "Renfert CONNECT app" also allows you to store data from third parties, in particular customers and patients. This is encrypted in a database on your local device. As a result, access by third parties, also by us, is excluded as far as possible. If you store third-party data, please be aware that as a user of the "Renfert CONNECT app", you are responsible for compliance with data protection regulations.
We use the data to provide the functionality of the "Renfert CONNECT app", the functionality of the units equipped with the "Renfert CONNECT Wi-Fi adapter" or a possible corresponding onboard solution, and the functionality of services connected via the "Renfert CONNECT app" (GDPR Article 6, Paragraph 1 lit. b). We also use it to notify you in the event of safety notices and/or recall information (GDPR Article 6, Paragraph 1 lit. c and d); for proactive maintenance and reactive correction of faults (GDPR Article 6, Paragraph 1 lit. b); for improvement of the user-friendliness of the app and troubleshooting (GDPR Article 6, Paragraph 1 lit. a and f); for improvement of our product and service offerings (GDPR Article 6, Paragraph 1 lit. f); for billing purposes; and for marketing research and market research (GDPR Article 6, Paragraph 1 lit. a).
III. Transfer of data
The transfer of your personal data to third parties for purposes other than those listed below will not take place.
We will only transfer your personal data to third parties if:
- You have given your express consent thereto in terms of Article 6 (1) (a) of the GDPR
- The transfer is necessary in terms Article 6 (1) (f) of the GDPR for purposes of asserting, exercising, or defending a legal right and there is no reason to assume that you have an overriding legitimate interest in your data not being transferred
- The transfer is necessary in terms Article 6 (1) (c) of the GDPR for compliance with a legal obligation
- The transfer is lawful and necessary in terms Article 6 (1) (b) of the GDPR for the implementation of a contractual relationship with you
- Or if there is another legal basis in terms Article 6 (1) of the GDPR
IV. Cookies
We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device when you visit our site. Cookies do not damage your device. They do not contain viruses, Trojans, or other malware.
The cookie stores information that arises in connection with the specific device used in each case. However, this does not mean that we thereby receive direct information of your identity.
On the one hand, the use of cookies serves to make the use of our site more convenient for you. Accordingly, we use session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted when you leave our site.
In addition, we also use temporary cookies to improve usability that are stored on your device for a specified period of time. If you visit our site again to make use of our services, it will automatically recognize that you have already been on our site previously as well as the inputs and settings that you made, so you do not have to re-enter them.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer to you (see Clause V.). When you return to our site, these cookies allow us to automatically recognize that you have already been to our site previously. These cookies are automatically deleted after a defined time in each case.
The data processed by cookies is necessary for the above-mentioned purposes in order to safeguard our legitimate interests, as well as those of third parties, in terms of Article 6 (1) (f) of the GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that cookies are not stored on your computer or a notice appears before a new cookie is created. Completely disabling cookies may however result in not all the features of our website being available to you.
V. Analysis and tracking tools
The tracking measures listed below are used by us on the basis of the provisions of Article 6 (1) (f) of the GDPR. We use the tracking measures to ensure that our site design meets our customers needs and for the continuous optimization of our website. In addition, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer to you. These are legitimate interests within the meaning of the above-mentioned provision.
The respective data processing purposes and data categories are apparent from the corresponding tracking tools.
1. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc., for the purpose of designing and continually optimizing our websites to meet the needs of our users (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, pseudonymized user profiles are created and cookies (see Clause IV.) are used. The information generated by the cookie about your use of this website, such as:
- browser type/version
- operating system used
- referrer URL (the previous page visited)
- host name of the accessing computer (IP address)
is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to the use of the website and Internet use for the purposes of market research and designing the website to meet the needs of our users. This information may also be transferred to third parties insofar as this is required by legislation or if such third parties process this data on our behalf as a processor. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized so that they cannot be identified (IP masking). The anonymization feature used ensures that Google regularly shortens your IP address within member states of the European Union or other states that are a party to the Agreement on the European Economic Area prior to transmission to the United States.
You can prevent the installation of cookies by setting the browser software accordingly; however, in this event, you may not be able to use all the features of the website.
You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking this link. An opt-out cookie will be set that will prevent the collection of your data when you visit this website in the future. The opt-out cookie will only be valid for this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to reset the opt-out cookie.
For further information about data protection in connection with Google Analytics, refer to the Google Analytics Help Center, for example.
2. Google Tag Manager
The Google Tag Manager solution provided by Google is an option with which we are able to manage website tags via a single interface. This allows us to integrate Google Analytics and other Google marketing services into our website. As Google Tag Manager only makes use of tags, it does not process any personal data about you.
3. GA Audience
Our website uses GA Audience, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "GA Audience"). GA Audience uses, among other things, cookies that are stored on your computer and other mobile devices (such as smartphones, tablets, etc.) that allow an analysis of the use of the respective devices. In some cases, the data is evaluated across devices. Google Audience obtains access to the cookies created when using Google AdWords and Google Analytics. Within the scope of this use, data, specifically the IP address and activities of the users, may be transmitted to a server of Google Inc. and stored there. Google Inc. may transfer this information to third parties insofar as this is required by legislation or if the processing of this data is to be carried out by third parties. You can prevent the collection and transfer of personal data (in particular your IP address) and the processing of this data by disabling the execution of Java Script in your browser or installing a tool such as 'NoScript'. You can also prevent the collection of the data generated by the Google cookie and regarding your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser add-on from the following link (https://tools.google.com/dlpage/gaoptout?hl=en). For more information on data protection when using GA Audience, please visit the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283
4. DoubleClick
We use DoubleClick, a service provided by Google Inc. DoubleClick uses cookies to set user-based ads. The cookies recognize which ad has already been displayed in your browser and whether you have accessed a website via an ad which was placed. The cookies do not collect any personal information and cannot be associated with such information.
If you do not want to receive personalized ads, you can disable receiving ads by means of Google's ads settings.
For further information on how Google uses cookies, see Google's Privacy Policy.
5. Meta Pixel, Custom Audiences and Facebook Conversion
In order to meet the needs of our customers and the continuous optimization of our site, we use " Meta Pixel" on Facebook, a service provided by Meta Platforms Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (hereinafter referred to as "Facebook").
Meta Pixel allows Facebook to designate the visitors to our site as the target group to whom ads are to be shown. We accordingly use Meta Pixel to ensure that the ads we place on Facebook (referred to as Facebook Ads) are only shown to those Facebook users who have expressed an interest in our site or who have certain characteristics, e.g., an interest in the dental topics that we have shared on Facebook (referred to as Custom Audiences). In addition, by using Meta Pixel, we try to ensure that our ads on Facebook correspond to the potential interest of users. Finally, by using Meta Pixel, we also seek to determine the effectiveness of our advertising on Facebook by recording whether users were directed to our site by clicking an ad on Facebook (referred to as Conversions).
The data is processed by Facebook in terms of the provisions of Facebook's data policy. General information on the use of data can be obtained at https://www.facebook.com/policy. You can find further information about Meta Pixel at https://www.facebook.com/business/help/651294705016616
You can adjust the types of ads that you see on Facebook in your Facebook account settings. The relevant settings can be found at https://www.facebook.com/settings?tab=ads; these settings apply to all platforms.
In addition, you naturally also have the right to object to the collection of your data by Meta Pixel as well as to the use of your data in connection with advertising on Facebook. Please use the following link for this purpose https://www.facebook.com/ads/preferences/?entry_product=ad_settings_Screen
VI. The rights of the data subject
You have the right:
- In terms of Article 15 of the GDPR, to demand information about your personal data that we are processing. In particular, you can demand information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to rectification, erasure, restriction of the processing, or the right to object to such processing, the existence of a right to lodge a complaint, any available information as to the source of your data, if this was not collected by us, and the existence of automated decision-making, including profiling, and, if necessary, meaningful information about the details thereof.
- In terms of Article 16 of the GDPR, to demand the rectification or completion of your personal data stored by us without undue delay.
- In terms of Article 17 of the GDPR, to demand the erasure of your personal data stored by us, except where the processing is necessary to exercise a right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- In terms of Article 18 of the GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful and you oppose the erasure thereof, or we no longer need the data but you require the data for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.
- In terms of Article 20 of the GDPR, to receive your personal data that you provided to us in a structured, commonly used, and machine-readable format, or to have it transferred to another controller.
- In terms of Article 7 (3) of the GDPR, to withdraw your consent at any time. As a consequence, we shall no longer be permitted to continue processing the data based on this consent in future.
- In terms of Article 77 of the GDPR, to lodge a complaint with a supervisory authority. In general, you may lodge your complaint with the supervisory authority at your usual place of residence or place of work, or at our company's principal place of business.
VII. Right to object
If your personal data is being processed on the basis of legitimate interests in terms of Article 6 (1) (f) of the GDPR, you have the right to object to the processing of your personal data in terms of Article 21 of the GDPR, insofar as there are grounds for this arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object that we will implement without you having to specify any particular situation.
If you would like to exercise your right to object or withdraw your consent, sending an e-mail to datenschutz@renfert.de is sufficient.
VIII. Data security
We use the popular SSL (Secure Socket Layer) method during your visit to our site, in conjunction with the highest level of encryption supported by your browser. Usually, this is 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. Whether an individual page of our website is displayed in an encrypted form is indicated by the locked representation of the key or lock icon in the bottom status bar of your browser.
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. We continuously improve our security measures in line with technological developments.
IX. Validity and modification of this data protection policy
This data protection policy is currently valid in the version of May 2018.
Due to the further development of our website and the offers contained therein or as a result of changes to the statutory or official requirements, it may be necessary to modify this data protection policy. You can view and print the currently applicable data protection policy at any time from our website at https://www.renfert.com/miscellaneous/data_protection.