Privacy Policy

Right to lodge a complaint
If you are of the opinion that the processing of your personal data does not comply with the General Data Protection Regulation, you have the right to lodge a complaint with the data protection authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/, as well as with any other data protection authority.

Right of revocation
You may revoke any consent you have given with effect for the future pursuant to Art. 7 GDPR.

Right to information, deletion and correction
According to Art. 15 GDPR, you have the right to obtain information about the personal data stored about you - including any recipients and the intended storage period. If incorrect personal data is processed, you have the right to rectification pursuant to Art. 16 GDPR. If the legal requirements are met, you can request the deletion or restriction of the processing and object to the processing (Art. 17, 18 and 21 GDPR).

If you wish your data to be deleted, but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You may exercise your right to data portability to the extent that the recipient and we are technically able to do so.

Mr. Thomas Werning will be happy to assist you in exercising your rights as a data subject using the contact information provided above.

Obligation to provide information
Without correct information from you, it is generally not possible to conclude a contract.

Automated decision making and profiling
Does not currently take place.

Intention to process data in third countries
Does not occur at this time.

Categories of recipients
In the context of the provision of special services, we use service companies that we have separately bound to secrecy and data protection. Access to personal data cannot be excluded.

These categories of recipients are

• Processors used by us (Art. 28 GDPR), in particular in the areas of IT services, tax, logistics and contracting/service companies that process your data for us in accordance with our instructions.
• Public bodies and institutions (tax authorities) if there is a legal or official obligation to do so.
• Other bodies for which you have given us your consent to transfer data.

Data will only be disclosed to government authorities if there are overriding legal requirements to do so.

III.1 General Website

Purpose of the processing
Presentation of the company, provision of services and/or sale of products and communication via the Internet. The purpose of data processing on this website is to provide information about our company's products and services and, where appropriate, to process applications, allowing users to contact the company's contacts in a targeted manner.

General Information
If you have provided us with personal information, we will use it to respond to your inquiries, to advise you, to process contracts concluded with you, and for technical administration. Your personal data will only be passed on or transferred to third parties if this is necessary for the purpose of processing the contract, for billing purposes or if you have given your prior consent. You have the right to withdraw your consent at any time with effect for the future, see "Right to withdraw consent".

Legal basis for the collection, processing and transfer of data within the framework of the execution of the contract is Art. 6 para. 1 lit. b GDPR.

This data will be deleted upon expiration of the applicable legal retention periods. If we are not subject to any legal retention obligations, the data will be deleted when the purpose no longer applies.

You have the right to access and object to the data we hold about you at any time. Further information can be found under "Rights of data subjects" and "Right of revocation".

III.2 Server data collection

Purpose of processing
When you visit our website, various data (server statistics) are automatically stored, which your browser transmits to our provider's server: Among other things, the IP address of your device, the date and time of access, the name and URL of the files accessed, the website (from which the access was made or from which you were referred to our site (referrer URL)), the browser used and, if applicable, the operating system of your device and the name of your provider are logged.

These data are processed by us for the purpose of a smooth connection and system security. This data is not combined with other data sources. The IP address is made anonymous. The connection data is automatically deleted, usually after a maximum of seven days. In the event of misuse of the website, log data will be stored until the incident has been resolved.

Legal basis is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TTDSG (here, however, only data such as browser or header information, which are inevitably transmitted or due to (browser) settings of the terminal device when accessing our website). This does not constitute "access to information already stored in the terminal device". Our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR results from the fact that we want to ensure the secure operation of the website and detect any attacks.

III.3 Contact form, download form and e-mail request

Purpose of processing
When you use our contact form, we collect and store your name and e-mail address for the purpose of responding to your inquiry. The phone number for a callback is optional. If you send us a contact request by e-mail, we collect and store the e-mail address and the data contained in the e-mail.

The legal basis is Art. 6 para. 1 lit. a GDPR, as you consent to the above-mentioned processing of your data by using the form and sending an e-mail. In addition, the legal basis also results from Art. 6 para. 1 lit. b GDPR, as the storage of the data is necessary for the fulfillment of a pre-contractual or possibly later contractual relationship.

The data will be deleted when the purpose of the storage no longer applies, i.e. after your email/contact form request has been answered or when the matter in question has been finally clarified and there is no longer any interest in further cooperation.

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Information on the right of erasure and information can be found under "Rights of Data Subjects".

III.4 Newsletter

Purpose of processing
If you wish to receive the newsletter offered on the website, we need an e-mail address from you. Registration for the newsletter is based on the double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This procedure prevents unauthorized persons from registering with your e-mail address. Your registration for the newsletter is logged (storage of the time of registration and confirmation and the IP address). This logging allows us to verify the registration process in accordance with legal requirements.

You can revoke your consent to the storage of your e-mail address (and, if fields are offered: optional first name and surname for the purpose of personal contact) and its use for sending the newsletter with the associated performance measurement at any time. You will find a link to unsubscribe at the end of each newsletter. In order to be able to prove that consent has been given for an unsubscribed e-mail address, we may store it for up to 3 years before deleting it.

Legal basis The sending of newsletters and the associated performance measurement is based on the registration of the recipient(s) concerned in accordance with Art. 6 para. 1 lit. b GDPR, Art. 7 GDPR and in connection with § 7 Abs. 2 Nr. 3 UWG or on the basis of the legal permission according to § 7 Abs. 3 UWG.

As well as Art. 6 para. 1 lit. f GDPR: Our legitimate interest in measuring success results from the fact that we recognize the reading habits of our users based on newsletter openings, opening times and clicked links, in order to be able to create and send them interest-based and useful content.

The legal basis for the logging is Art. 6 par. 1 lit. f GDPR. Our legitimate interest arises from the fact that we use a secure and user-friendly newsletter system that is useful for sending newsletters and protecting the personal data of newsletter subscribers. It also allows us to prove consent.

III.5 Cookies

Purpose of processing
By default, this site does not use cookies. Cookies are data sets (previously only small text files) that are stored in your Internet browser (e.g. Firefox, Google Chrome, Microsoft Explorer/Edge, Safari, etc.) or on your computer (i.e. your operating system) when you visit our website. The cookie, which contains a specific string of characters and possibly other information, enables our website to recognize your Internet browser when you visit it.

Legal basis for our own cookies is Art. 6 para. 1 lit. f GDPR and § 25 para. 1 TTDSG. Our legitimate interest is based on the fact that we only use the above-mentioned cookies to facilitate your access to the website, do not collect any tracking data and therefore do not interfere with your personal rights and fundamental freedoms.

You can disable the acceptance of cookies in your web browser. However, this may result in functional limitations.

If you use the following Matomo opt-out feature, an opt-out cookie will be stored.

We use cookies from the following third parties: none

IV.1 Customer data/interested parties

Purpose of processing
We process data that we receive in the course of our business relationship with you. We receive this information directly from you. Either in the case of enquiries from interested parties and contacts, the placing of orders or the processing of orders (see "Information on data collection and processing").

Legal basis
The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 par. 1 (b) GDPR. The use for direct advertising is based on Art. 6 para. 1 (f) GDPR. We have a legitimate interest in using direct marketing to make you aware of special offers. The data will not be passed on to third parties unless this is required by law, e.g. to the tax office for tax purposes. The data is deleted as soon as it is no longer required for the purpose for which it was processed or after expiry of the statutory retention periods (e.g. tax and commercial accounting documents: 10 years; commercial and business correspondence: 10 years): 10 years; commercial and business correspondence: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).

You have the right to object at any time to the use of your data for direct marketing purposes. You also have the right to obtain information about the data we have stored about you and, if it is incorrect, to have it corrected or, in the case of unauthorized storage, to have it deleted. You also have the right to lodge a complaint with a supervisory authority (see "Right to Complain").

Duration of data storage
After the contractual service has been provided, your personal data will be stored for 2 years for the purposes of the statutory warranty, for 5 years for the purposes of fulfilling warranty conditions, for 5 years for the purposes of fulfilling follow-up orders (at the time of the conclusion of the contract or later) and for 10 years for tax purposes.

Deletion of data
Your personal data will be deleted at the latest at the end of the above-mentioned periods.

IV. 2 Suppliers

Purpose of processing
We process data that we receive in the course of our business relationship with you. We receive the data directly from you when you place or process an order (see "Information on data collection and processing").

Legal basis
The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 para. 1 (b) GDPR. The data will not be passed on to third parties unless this is required by law, e.g. to the tax office for tax purposes. The data is deleted as soon as it is no longer required for the purpose for which it was processed or after expiry of the statutory retention periods (e.g. accounting documents relevant to tax and commercial law: 10 years; commercial and business correspondence: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).

You have the right to obtain information about the data we have stored about you and, if the data is incorrect, to have it corrected or, in the case of unauthorized storage, to have it deleted. You also have the right to lodge a complaint with a supervisory authority (see "Right to Complain").

IV. 3 Applications

We offer you the opportunity to apply for vacant positions conveniently via our website. We use a widget of the talent management platform Join, a service of JOIN Solutions AG, Eichenstrasse 2, 8808 Pfäffikon SZ (Schwyz) (hereinafter: "Join"), for the application process and for applicant management. The application portal makes Join available to us as a so-called processor in accordance with Art. 28 GDPR, for which we have concluded a contract in accordance with the GDPR. Before engaging Join, we have satisfied ourselves that Join provides sufficient guarantees for secure and legally compliant data processing to ensure adequate protection of personal data.

All data collected as part of the application process is encrypted using SSL and transferred to Join's servers for the purpose of candidate management, where it is stored and processed.

Purpose of processing
We process the data you provide in your application solely for the purpose of processing your application.

The legal basis 
is your consent pursuant to Art. 6 para. 1 lit. a GDPR and, as far as special categories of personal data (e.g. information about your health, your religion, your ethnic origin, your political orientation or other "sensitive" data) are concerned, your consent pursuant to Art. 9 para. 2 lit. a GDPR. It is expressly not in our interest to process the aforementioned special categories of data. We therefore recommend that you only provide the information that is absolutely necessary for the processing of your application and that you remove or mask such "sensitive" data in your documents.

You may withdraw your application at any time. In this case, your data will be deleted immediately, unless there is a legal reason for keeping it. You may revoke your consent to data processing in whole or in part with effect for the future. An email to personal@remmert.de with your full name is sufficient. You can of course also send your revocation by post: Remmert GmbH, e.g. personnel department, Brunnenstr. 113, 32584 Löhne. Please note that we will then no longer be able to consider your application or consider it in the form in which it was submitted.

The processing of your personal data submitted as part of your application will generally take place for the duration of the application process. If we are unable to offer you a job, we will store the data you have provided for up to six months after the end of the application process (dispatch of the rejection letter) in order to be able to answer questions in connection with your rejection and to be able to comply with the obligations to provide evidence under the General Equal Treatment Act (AGG). If you have given us your consent and your application is of fundamental interest, your data may be stored for a longer agreed period in order to be able to consider you for subsequent job offers.

If your application is successful, the data you provide may be used for personnel purposes in connection with your employment. In this case, your data will be stored for the duration of the employment relationship and will be deleted at the end of the employment relationship or, at the latest, at the end of the statutory periods of limitation or preclusive periods under the employment contract. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG.

Your application (whether online, by mail or by e-mail) will only be acknowledged and processed by the responsible employees. All employees involved in data processing are obliged to maintain the confidentiality of your data.

The personal data processed as part of the application process will only be disclosed to third parties if and to the extent that this is necessary and legally permissible or if there is a corresponding legal or statutory obligation to do so, e.g. if we are obliged to do so by a court of law.

Unless you inform us otherwise, your data will be deleted 6 months after the end of the application process or, in the case of postal applications, destroyed. Due to the long application and selection periods for interns, we will store your data in Germany for up to 18 months.

IV. 4 Video Surveillance

Purpose of processing
The purpose of our video surveillance is to prevent vandalism and to protect against theft and burglary. As the controller, we process personal image files that we collect as part of the video surveillance of the company premises. The retention period is 48 hours. After that, the data is irrevocably deleted.

The legal basis 
is Art. 6 para. 1 (f) GDPR. Our legitimate interest lies in the protection against burglary, the protection of our property and access control.

This data will only be passed on to investigating authorities in the event of criminal offences.

Remmert GmbH operates company pages on Instagram, Xing and LinkedIn.
As this is sometimes discussed differently - and quite rightly - in the area of data protection, we would like to inform you accordingly here.

We operate these presences on the basis of our legitimate interest to communicate with the users active there and to offer information on the networks/platforms.

Legitimate interests 
Art. 6 para. 1 (f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

Since this always involves data processing by the network providers (usually for market research and advertising purposes), and since some of this processing takes place outside the European Union, our sites are directed only at users who are active there and who have consciously agreed to the terms of use of the respective providers.

The U.S. providers agree to provide comparable guarantees of a secure level of data protection as the data protection standards of the EU.

In our review and implementation, we will consider the following in particular

• No exclusive information on social networks and platforms, but only information about posts and events on our own website.
• No advertising or promotion of our presence outside of the respective networks/platforms - i.e. no explicit recruitment of users who have not agreed to the terms of use.
• No plug-ins or integration of scripts from vendors.
• Regular evaluation of our presence on the social networks/platforms and risk assessment.

The relevant privacy information and statements can be found below:

LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy Policy: www.linkedin.com/legal/privacy-policy
Opt-out option: www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing:
XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany
Privacy Policy: privacy.xing.com/de/datenschutzerklaerung

On Instagram
Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent Company: Meta Platforms, 1 Hacker Way, Menlo Park, CA 94025, USA
Privacy Policy: about.instagram.com/de-de/blog/announcements/instagram-community-data-policy/