Privacy Policy

We are pleased that you are visiting our website. Protecting your privacy and personal data, known as personal data, when using our website is an important concern for us. Personal data are all information relating to an identified or identifiable natural person as defined in Art. 4 No. 1 of the GDPR. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address. Data that cannot be linked to your person, such as through anonymization, are not personal data. Processing (e.g., collection, storage, reading, querying, use, transmission, deletion, or destruction) as per Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted once the purpose of the processing has been achieved and there are no legally prescribed retention obligations to uphold.

Here you will find information on how we handle your personal data when visiting our website. To provide the functionalities and services of our website, it is necessary that we collect personal data about you. We also explain the type and scope of the respective data processing, the purpose, the corresponding legal basis, and the respective storage duration. This privacy policy applies only to this website. It does not apply to other websites we refer to via hyperlinks. We cannot take responsibility for the confidential handling of your personal data on these third-party websites as we have no influence over whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.

1. Responsible Party

Responsible for the processing of personal data on this website is (see imprint): RSG GmbH, represented by the managing director Sergen Günes, Phone: 06142 7933586, Email: [email protected]

2. Provision and Use of the Website / Server Log Files

a) Type and Scope of Data Processing When you use this website without transmitting data to us in other ways (e.g., through registration or using the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Access status/HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

a) Purpose and Legal Basis This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website. The legal basis for this processing is Art. 6(1)(f) GDPR. The processing of the aforementioned data is required to provide a website and thus serves to safeguard a legitimate interest of our company.

b) Storage Duration The personal data mentioned will be deleted as soon as they are no longer necessary for displaying the website. The collection of data for providing the website and storing data in log files is essential for the operation of the website. Therefore, there is no option for the user to object in this regard. Further storage may occur in individual cases if legally required.

3. Use of Cookies

a) Type, Scope, and Purpose of Data Processing We use cookies. Cookies are small files that are sent from our website to your device's browser and stored there during your visit to our website. Some functions of our website cannot be offered without using technically necessary cookies. Other cookies enable us to perform various analyses. Some cookies can recognize the browser you use on a return visit to our website and transmit different information to us. We use cookies to make the use of our website easier and more efficient. For example, cookies allow us to track your usage of our website and determine your preferred settings (e.g., country and language settings). If third parties process information through cookies, they collect the information directly through your browser. Cookies do not harm your device; they cannot execute programs and do not contain viruses. Various types of cookies are used on our website, which are explained below.

Temporary Cookies/Session Cookies Temporary cookies or session cookies are used on our website, which are automatically deleted once you close your browser. These cookies allow us to capture your session ID. This enables us to assign different requests from your browser to a shared session and recognize your device on subsequent visits to our website.

Permanent Cookies Permanent cookies are used on our website. Permanent cookies are stored in your browser for a longer period and can transmit information. The storage duration varies depending on the cookie. You can delete permanent cookies yourself through your browser settings.

Third-Party Cookies We use analytical cookies to monitor anonymized user behavior on our website. We also use advertising cookies to track user behavior for advertising and targeted marketing purposes. Social media cookies allow us to connect to your social networks and share content from our website within your networks.

Browser Configuration Settings Most web browsers are preset to accept cookies automatically. However, you can configure your respective browser to accept only certain cookies or none at all. Please note that if you do so, you may not be able to use all functions of our website. You can also delete cookies already stored in your browser through your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are saved. Since the functions of different browsers vary, please use the help menu of your browser for the corresponding configuration options. Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you delete this cookie afterward, you must disable it again.

b) Legal Basis Due to the described purposes, the legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR. If you have given us your consent to use cookies based on a notice on our website (cookie banner), the legal basis is additionally Art. 6(1)(a) GDPR.

c) Storage Duration As soon as the data transmitted to us through cookies is no longer necessary for the above-mentioned purposes, this information will be deleted. Further storage may occur in individual cases if legally required.

4. Data Collection for Pre-Contractual Measures and Contract Fulfillment

a) Type and Scope of Data Processing In the pre-contractual area and upon contract conclusion, we collect personal data about you. This includes, for example, first and last name, address, email address, telephone number, or bank details.

b) Purpose and Legal Basis of Data Processing We collect and process this data exclusively for contract fulfillment or to fulfill pre-contractual obligations. The legal basis for this is Art. 6(1)(b) GDPR. If you have given us your consent, the additional legal basis is Art. 6(1)(a) GDPR.

c) Storage Duration The data will be deleted once they are no longer necessary for the processing purpose. There may also be statutory retention obligations, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data after the retention obligations end.

5. Order Form An order form is available on our website, which can be used for electronic pre-orders.

a) Type and Scope of Data Processing Our data collection is limited to the following data:

• First and last name
• Telephone number
• Email address
• Bank details
• Product name
• Content of the personal message, if applicable

b) Purpose and Legal Basis The purpose of the data processing is to handle your order properly. The legal basis for this is Art. 6(1)(b) GDPR. The processing of the data is for contract fulfillment or pre-contractual measures required upon your request.

c) Storage Duration The data will be deleted once they are no longer needed for the processing purpose. There may also be statutory retention obligations, such as commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data after the retention obligations end.

6. Registration Option

a) Type and Scope of Data Processing You can register on our website. When you register, we collect and store the data you enter into the input mask (e.g., last name, first name, email address). The data will not be passed on to third parties.

b) Purpose and Legal Basis of Data Processing Your registration is necessary for using certain content and services on our website or for contract fulfillment or pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or have it completely deleted from the data stock of the data controller. The legal basis for processing is your consent per Art. 6(1)(a) GDPR. If your registration serves to prepare a contract, Art. 6(1)(b) GDPR is an additional legal basis.

c) Storage Duration The data collected during registration will be stored as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

7. Data Transmission

We only transfer your personal data to third parties if: a) You have given your explicit consent pursuant to Art. 6 para. 1 lit. a) GDPR. b) It is legally permissible and required under Art. 6 para. 1 lit. b) GDPR for the fulfillment of a contractual relationship with you or for the implementation of pre-contractual measures. c) A legal obligation for the transfer exists pursuant to Art. 6 para. 1 lit. c) GDPR. We are legally obligated to transmit data to government authorities, such as tax authorities, social security institutions, health insurance companies, regulatory authorities, and law enforcement agencies. d) The transfer is necessary pursuant to Art. 6 para. 1 lit. f) GDPR for the protection of legitimate business interests, as well as for the establishment, exercise, or defense of legal claims, and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data. e) We use external service providers (so-called processors) pursuant to Art. 28 GDPR for the processing, which are obligated to handle your data carefully. We use such service providers in the areas of: • IT • Logistics • Telecommunications • Sales • Marketing

When transmitting to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities handle your personal data with the same level of care as within the EU or the EEA. We only transmit personal data to third countries if the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

8. Application Opportunity

a) Type and Scope of Data Processing You can apply on our website or by email. When you apply, we collect and store the data you enter in the input mask or send to us by email.

b) Purpose and Legal Basis We process your data only for the purpose of handling your application. No data is transferred to third parties. The legal basis for the processing is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG and additionally Art. 6 para. 1 lit. b) GDPR. If you give us consent to be included in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Retention Period If we cannot offer you a position, we store your data for up to six months after the end of the application process, considering § 61b para. 1 ArbGG in conjunction with § 15 AGG. The period begins upon receipt of the rejection letter. If you have given us consent to be included in our applicant pool, we store your data for a maximum of two years.

d) Data Disclosure Only the departments involved in the decision-making process (responsible HR or specialist departments, management, works council) receive your data. Additionally, we are obligated to transmit your data to public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office, social security institutions).

Further data recipients may be those entities for which you have given us consent to transmit data.

9. Comment Function

a) Type and Scope of Data Processing You can comment on posts on our website. When you comment on a post, we collect and store the data you enter in the input mask. In addition to the comments you leave, we also store information about the time the comment was entered and, if applicable, the username (pseudonym) you have chosen. Furthermore, the IP address assigned by the Internet Service Provider (ISP) of the affected person is stored. No data is transferred to third parties.

b) Purpose and Legal Basis The data you provide (e.g., the IP address) is used for security reasons and in the event that the affected person violates the rights of third parties or posts illegal content through a comment. There is no transfer of this collected personal data to third parties unless such a transfer is required by law or serves the legal defense of the person responsible for the processing.

The legal basis for processing the personal data transmitted when using the comment function is Art. 6 para. 1 lit. a) GDPR, provided your consent is given. This consent can be revoked at any time. The legality of the data processing operations already carried out remains unaffected by the revocation. Another legal basis is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in processing the data if the rights of third parties are violated or illegal content is posted. This serves security in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.).

c) Retention Period The comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content is completely deleted or the comments must be deleted for legal reasons.

10. Contact Form

a) Type and Scope of Data Processing On our website, we offer you the opportunity to contact us via a provided form. During the submission process of your inquiry via the contact form, reference is made to this privacy policy to obtain your consent.

If you use the contact form, the following personal data will be processed:

• Salutation
• First name
• Last name
• Title
• Company
• Industry
• Function
• Street
• Street number
• Postal code
• City
• Country
• Email address
• Phone number
• Subject
• Message content

b) Purpose and Legal Basis The provision of your email address serves the purpose of responding to your inquiry via email. When using the contact form, your personal data is not transferred to third parties. The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR, which you voluntarily provide and can revoke at any time with future effect.

c) Retention Period The data you enter in the contact form remains with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – especially retention periods according to the Commercial Code (HGB) or the Fiscal Code (AO) – remain unaffected.

11. Contact Options via Email

On our website, you have the option to contact us via email.

a) Type and Scope of Data Processing You can contact us by email. Our data collection is limited to the email address of the email account you used to contact us and to any personal data you provide in the course of contacting us.

b) Purpose and Legal Basis The purpose of data processing is to be able to respond appropriately to your inquiry. The legal basis is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in processing the above-mentioned personal data to handle your inquiry appropriately.

c) Retention Period The retention period for the above-mentioned data depends on the reason for your contact. Your personal data is regularly deleted once the purpose of the communication has ceased and storage is no longer necessary. This can result, for example, from the handling of your request.

12. Newsletter

a) Type and Scope of Data Processing On our website, you can subscribe to a free, regular email newsletter. To send you the newsletter regularly, we need your email address.

For newsletter distribution, we use the so-called double opt-in procedure.

This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to the newsletter being sent. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter by clicking on a corresponding link.

This ensures that only you, as the owner of the specified email address, can register for the newsletter. Your confirmation must be sent promptly after receiving the confirmation email, otherwise, your newsletter subscription will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g., last name, first name, email address). When you register for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) and the date and time of registration to be able to trace any possible misuse of your email address at a later date. For control purposes, we also store the date and time of the click on the confirmation link and the IP address assigned by the ISP in the confirmation email (double opt-in).

b) Purpose and Legal Basis The data collected during newsletter registration is used exclusively for the purpose of promotional contact via the newsletter. The processing of your email address for sending the newsletter is based on Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 No. 3 UWG on the voluntary consent you provide, which can be revoked at any time with future effect. Additionally, the processing is based on Art. 6 para. 1 lit f) GDPR due to our legitimate interest in documenting the necessary consent.

c) Retention Period Your email address is stored as long as you subscribe to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have explicitly consented to further use of your data.

13. Tracking and Analysis Tools

We use tracking and analysis tools to ensure the continuous optimization and customized design of our website. By using tracking and analysis measures, we are also able to statistically record the use of our website by visitors and further develop our online presence based on the insights gained.

We have a legitimate interest in this, which justifies the use of the tracking and analysis tools described below in accordance with Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to use cookies based on a notice on our website ("cookie banner"), the legality of the use is additionally based on Art. 6 para. 1 lit. a) GDPR.

The following description of the tracking and analysis tools details the type, scope, and respective processing purposes.

An exact overview of the web analytics and social media tools we use can be found here

14. Data Security and Safeguards

We are committed to protecting your privacy and handling your personal data confidentially. We take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognized encryption procedures (SSL or TLS). However, data disclosed unencrypted, for example, when this occurs via unencrypted email, may potentially be read by third parties. We have no control over this. It is the responsibility of the user to protect the data provided by them against misuse through encryption or other means.

15. Changes to the Privacy Policy

We reserve the right to update this statement as necessary.

16. Your Rights

Here you will find your rights regarding your personal data. Details are provided in Articles 7, 15-22, and 77 GDPR. You can contact the responsible office (see No. 2) regarding this.

a) Right to Withdraw Consent under Art. 7 para. 3 sent. 1 GDPR You can withdraw your consent to the processing of your personal data at any time with future effect. The lawfulness of the processing carried out based on the consent until the withdrawal remains unaffected.

b) Right of Access under Art. 15 GDPR You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data and to further information, such as the processing purposes, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

c) Right to Rectification and Completion under Art. 16 GDPR You have the right to demand the correction of inaccurate data without delay. Considering the purposes of the processing, you have the right to request the completion of incomplete data.

d) Right to Erasure ("Right to be Forgotten") under Art. 17 GDPR You have the right to deletion, provided the processing is not required. This is the case, for example, if your data is no longer necessary for the original purposes, you have withdrawn your consent to data processing, or the data was processed unlawfully.

e) Right to Restriction of Processing under Art. 18 GDPR You have the right to restrict the processing, e.g., if you believe the personal data is incorrect.

f) Right to Data Portability under Art. 20 GDPR You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

g) Right to Object under Art. 21 GDPR You have the right to object at any time, for reasons arising from your particular situation, to the processing of certain personal data concerning you. In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling, insofar as it is associated with such direct advertising.

h) Automated Individual Decision-Making, Including Profiling, under Art. 22 GDPR You have the right not to be subject to a decision based solely on automated processing – including profiling – except in the cases mentioned in Art. 22 GDPR.

i) Right to Lodge a Complaint with a Supervisory Authority under Art. 77 GDPR You can also lodge a complaint with a supervisory authority at any time, for example, if you believe that the data processing does not comply with data protection regulations.

16. Copyrights

We hold copyright on all images, films, and texts published on our website. The use of images, films, and texts is not permitted without our express consent.

17. Dispute Resolution, Applicable Law, and Jurisdiction

We do not participate in any dispute resolution procedure before a consumer arbitration board as defined by the Consumer Dispute Resolution Act.

The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods.

If you are a merchant, the exclusive place of jurisdiction is our business location. Otherwise, the applicable statutory provisions govern the local and international jurisdiction.