DE EN CZ

 

1. General information and mandatory notices

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Responsibility

The responsible party in accordance with the EU General Data Protection Regulation (GDPR) is:

Römheld & Moelle Eisengießerei GmbH
Rheinallee 92
55120 Mainz
Phone: +49 6131 960 600

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar). You can contact our data protection officer at:
datenschutz@roemheld-moelle.de
or our postal address with the addition of „data protection officer“.

Disclosure, Blocking and Removal of Personal Data 

Within the framework of the applicable legal provisions, you have the right to be informed at any time and free of charge about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Right to data transfer

You have the right to have the data, that we process automatically based on your consent or in fulfillment of a contract, handed over to you or to a third party in a common, machinereadable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to file a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found in the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Objection against advertising mails

The use of contact data published within the framework of the legal notice obligation to send advertising and information materials not expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Hyperlinks

On our web pages, we offer you links to web pages that may be of interest to you, over whose content we have no influence. We do not take any liability for these external contents. The linked pages were checked for possible legal violations at the time the link was set. Such were not recognizable at the time the link was set. However, constant monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of the
law. As soon as legal violations of the linked websites become known, we will immediately remove the affected links.

 

2. Data collection on our website

Data processing

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user. The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Server-Log-Data

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: – Browser type and browser version – Operating system used – Referrer URL – Host name of the accessing computer – Time of the server request – IP address A combination of this data with other data sources is not made. The basis for the data processing is to display our website to you and to ensure the stability and security is Art. 6 para. 1 lit. f DSGVO.

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called „session cookies“. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and
activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this
purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

3. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called „cookies“. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP Anonymisation

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will
use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google
Analytics will not be merged with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Google Analytics deaktivieren.. For more information on how Google Analytics handles user data, please see Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de.

 

4. Plugins und Tools

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the
USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the
meaning of Art. 6 para. 1 lit. f DSGVO. More information on the handling of user data can be found
in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

 

5. Data protection information on the whistleblower system

Below we inform you in accordance with Art. 13 and 14 of the EU General Data Protection Regulation (GDPR) about the processing of your personal data (hereinafter referred to as „data“) as part of the Römheld & Moelle whistleblower system. We will only process the data within the framework of the whistleblower system in accordance with the applicable data protection regulations. These requirements result in particular from the GDPR and the German Federal Data Protection Act (BDSG). This data protection information supplements our general data protection information for employees.

Who is responsible for processing your data?

Responsible for the processing of your data is the

Römheld & Moelle Eisengießerei GmbH

Rheinallee 92

55120 Mainz

Phone: +49 6131 960 600

E-mail: info@roemheld-moelle.de

 

You can reach our data protection officer either at

E-mail: datenschutz@roemheld-moelle.de

or at the above postal address with the addition „Data Protection Officer“.

What data is processed?

In principle, you can submit your reports anonymously, i.e. without providing any data. However, you can voluntarily disclose your data, including details of your identity, your first and last name, your telephone number or your e-mail address. If you provide this or other data voluntarily, it will be processed by us.

We do not request or process special categories of personal data, such as information on ethnic origin, religious and/or ideological beliefs, trade union membership or sexual orientation. However, you can voluntarily provide such special categories of personal data (e.g. in the e-mail or letter).

The notification you submit may also contain data from third parties to whom you refer in your notification. These data subjects have the opportunity to comment on the information. In this case, we will inform the persons concerned about the report or the information provided. Your confidentiality is also guaranteed in this case, as the person concerned will – as far as legally possible – not receive any information about your identity and your information will be used in such a way that your anonymity is not jeopardised.

Please note that it is often required by law that the persons who are the subject of a report or tip-off must be notified and heard. During the investigation, these persons have the opportunity to present their views on the report. The data subject may have a right to information under applicable laws that could compel us to disclose their identity. Government agencies may also have similar rights of access or seizure that result in the disclosure of your identity. This may be the case in particular if the person concerned claims that the information provided against them is intentionally or grossly negligently untrue and then decides to press charges.

For what purposes is your data processed?

We process your personal data within the framework of the applicable laws, in particular for the following specific compliance and information purposes:

·        Checking the plausibility of information

·        Cooperation with the ombudsman’s office

·        Clarification of misconduct

·        Implementation of legal obligations

·        Prevention of future misbehaviour

·        Exercise of rights

·        Relief for employees

·        Implementation of duties to co-operate.

In addition, the purposes listed in the general data protection information for employees may also be considered as possible purposes of data processing.

What is the legal basis for processing your data?

The collection, processing and disclosure of your data in the context of the notifications is carried out in accordance with the applicable data protection laws, including the GDPR and the BDSG.

Implementation of legal obligations: If the notification falls within the scope of the HinSchG, the legal basis for the processing of your data in connection with this notification is Section 10 HinSchG in conjunction with Art. 6 para. 1 lit. c GDPR. Art. 6 para. 1 lit. c) GDPR.

Safeguarding legitimate interests: In all other cases, the processing of your data in relation to a (potential) violation is based on our legitimate interest in investigating violations, receiving reports of violations and processing them in accordance with our standards and values (Art. 6 para. 1 lit. f) GDPR). Our legitimate interests may include in individual cases:

·        Right-wing defence

·        Improving the compliance structure

·        Support for those affected

·        Implementation of foreign legislation.

Investigation of criminal offences: The processing of data relating to criminal offences is carried out in accordance with Art. 10 GDPR (and Section 9 (2) HinSchG, if applicable). If reconnaissance measures serve to uncover possible criminal offences in the context of employment relationships, these may be justified in accordance with Section 26 (1) sentence 2 BDSG. However, we will only base such data processing on Section 26 (1) sentence 2 BDSG in conjunction with Art. 6 (1) lit. Art. 6 para. 1 lit. b) GDPR if documented factual indications justify the suspicion of a criminal offence in the employment relationship and the interests of the data subject do not prevail.

Implementation of the employment relationship (Section 26 (1) sentence 1 BDSG in conjunction with Art. 6 (1) (b) GDPR): Data processing in the context of reconnaissance measures may be necessary, among other things, for the implementation and termination of the employment relationship with employees. This applies, for example, to reconnaissance measures to uncover breaches of duty under employment contracts that do not constitute a criminal offence. Investigative measures may also be necessary for the settlement of employment relationships. This may be the case, for example, if we impose labour law sanctions against a person concerned on the basis of the findings obtained in the course of an investigative measure.

Company agreements (Art. 88 para. 1 GDPR, Section 26 para. 4 BDSG): We may also process your data on the basis of a valid company agreement that regulates the introduction and operation of the whistleblowing system.

Consent: In addition, data may be processed on the basis of Art. 6 para. 1 lit. a) GDPR if the reporting person has given consent.

Processing of special categories of personal data: If, in exceptional cases, special categories of personal data are processed (sensitive data), the legal basis for the processing is Art. 9 GDPR, Section 10 HinSchG and Section 22 BDSG.

We do not intend to use your data for purposes other than those mentioned above.

Who are the recipients of your data?

Initially, only authorised persons obtain knowledge of the data transmitted by the ombudsman’s office in pseudonymised form. Appropriate authorisation systems and appropriate technical and organisational measures ensure that only the relevant persons have access to this data. The persons entrusted with processing the incidents are expressly obliged to maintain confidentiality.

In order to fulfil the aforementioned purpose, it may also be necessary for us to transfer your data to third parties, such as law firms, criminal or competition authorities, authorities within or outside the EU/EEA.

Your data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary in the context of clarifying facts that have been communicated to us by the ombudsman’s office (e.g. commissioning an auditing firm abroad). In such a case, we ensure that the standard contractual clauses of the EU Commission are concluded with the recipient of the data and that all relevant additional guarantees are in place. Otherwise, we do not transfer your data to countries outside the EU or the EEA or to international organisations.

How long will your data be stored?

Your data will be stored in accordance with the applicable data protection laws and deleted 3 years after completion of the procedure (§ 11 para. 5 HinSchG). In certain cases and for certain documents, a longer period may be appropriate. Data may also be stored if this is required by European or national legislation to fulfil legal obligations, such as retention obligations. All data will then be deleted, blocked or anonymised.

What data protection rights do you have?

You have extensive rights with regard to the processing of your data.

Right to information: You have the right to information about the data stored by us, in particular the purpose for which the data is processed and how long the data is stored (Art. 15 GDPR). This right is limited by the exceptions of Section 34 BDSG, according to which the right to information does not apply in particular if the data is only stored due to statutory retention requirements or for data backup and data protection control, the provision of information would require a disproportionate effort and misuse of the data processing is prevented by suitable technical and organisational measures.

Right to rectification of inaccurate data: You have the right to obtain from us without undue delay the rectification of inaccurate data concerning you (Art. 16 GDPR).

Right to erasure: You have the right to obtain from us the erasure (Art. 17 GDPR) of data concerning you. These conditions apply in particular if a) the respective processing purpose has been achieved or otherwise ceases to apply, b) we have processed your data unlawfully, c) you have withdrawn your consent without the data processing being able to continue on another legal basis, d) you successfully object to the data processing or e) in cases where there is an obligation to erase based on the law of the EU or an EU member state to which we are subject. This right is subject to the restrictions set out in Section 35 BDSG, according to which the right to erasure may not apply in particular if, in the case of non-automated data processing, a disproportionately high effort is required for erasure and your interest in erasure is considered to be low.

Right to restriction of processing: You have the right to request that the processing of your data be restricted (Art. 18 GDPR). This right exists in particular if a) the accuracy of the data is disputed, b) you request restricted processing instead of erasure under the conditions of a legitimate request for erasure, c) the data is no longer required for the purposes pursued by us, but you need the data for the assertion, exercise or defence of legal claims or d) the success of an objection is still disputed.

Right to data portability: You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format (Art. 20 GDPR), provided that it has not already been erased.

Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of data concerning you (Art. 21 GDPR). We will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. The revocation does not affect the legality of the processing carried out on the basis of the previous consent. The only consequence of the revocation is that we may no longer continue the data processing based on this consent in the future. Please note, however, that we may not be able to provide certain services or additional services if we are unable to process the data required for this purpose.

Right in connection with automated decision-making: You have the right (Art. 22 GDPR) not to be subject to automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you. We generally do not use automated decision-making or profiling in employment matters. However, if you have been subject to an automated decision and do not agree with the outcome, you can contact us in the ways set out below and ask us to review the decision

Right to lodge a complaint with the supervisory authority: You have the option of contacting the above-mentioned data protection officer or a data protection supervisory authority if you believe that the processing of data concerning you is in breach of the GDPR.