Data Privacy Protection
REHAU is pleased about your interest in our internal and our products. We want you to feel comfortable when you contact REHAU. For this reason the security of your personal data such as your name, address, telephone number or e-mail address which is created when you contact REHAU is important to us.
This privacy statement is intended for anyone with which REHAU interacts including customers and prospects, visitors of our websites, users of our apps/applications, other users of our products or services and visitors to our sites.
You can find further information on the data protection of the social media company presences used by REHAU at www.rehau.com/dataprivacy-socialmedia.
1. Terms
The processing of personal date takes place within the guidelines of legal regulations.
The Term "personal data" refers to all information relating to an identified or identifiable natural person. "Processing" means any operation or set of operation which is performed on personal date whether or not by automated means such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
2. Name and address of the controller
REHAU POLYMERS SDN. BHD
B-1-23, Blok Bougainvillea, 10 Boulevard Lebuhraya Sprint, PJU 6A, Petaling Jaya 47400 Selangor, Malaysia
3. General processing purposes and legal bases
REHAU collects and processes your personal date in particular in the following cases:
- If you contact us directly e.g. via our website, via REHAU customer service or if you visit us at our locations, participate in our events, customer satisfaction surveys and competitions and are interested in our products or services or have any other concerns.
- If you or your employer buy products or services directly from us.
- If you or your employer request information about our products and services (e.g. sending brochures or price lists).
- If you buy or use REHAU products.
- If you or your employer offer or sell us products or services.
Please help us keep your information current by informing us of changes to your personal data, in particular your contact details.
Insofar as REHAU processes personal data, this applies in particular to your name and your official contact data such as company, function, telephone number or e-mail address as well as contract and transaction date. Additional data categories may be collected for special purposes described in detail below.
Besides the collection of your data from our contact forms on our website, we also collect the data directly from you or from generally accessible sources (e.g. commercial register, authorities and internet) to the necessary extent for the purpose.
4. Individual processing purposes and legal bases
In the following we inform you for which purposes REHAU processes which personal date. In the case of nonrecurring circumstances, REHAU will generally draw your attention to this information separately in the specific processing situation and, if necessary, provide additional information.
4.1 Processing of data for the preparation, conclusion and performance of contracts
As a manufacturing company, REHAU processes personal data within the scope of acquisition (also under 4.10.) and sales processes as well as for the execution of contracts. For this purpose, data is processed in particular for contract initiation, quotation processing, customer consulting procurement, production and delivery of goods, contract management and complaint processing.
Within the context of these activities, the following data categories are processed in particular:
- Contact data/ personnel master data (surname first name, address, e-mail address etc.)
- Logistics data such as delivery address
- Contract data, payment data
It may be necessary for us to pass on the data for the preparation of an offer and the execution of the contract to third parties who are integrated into the supply chain or otherwise required for the execution of the contract.
For the purpose of credit checks of our business partners, we process data which we receive under the legal requirements of credit agencies (such as Schufa). In addition, to further minimize the risk of default, REHAU reserves the right to report payment experiences with customers to a payment experience pool of a scoring company . This does not apply to payment experiences with natural persons.
In order to optimize financial transactions, REHAU reserves the right to assign receivables from its business customers to a refinancing company as part of receivables financing. Only company-related data (name of debtor, reason, amount, due date of the receivable) will be passed on for the purpose of receivables financing. Insofar as necessary for the verification of the receivable, the refinancing company will pass on the aforementioned company data to third parties for credit assessment.
If data is collected directly for the processing of an inquiry or the execution of a contract, REHAU will inform you which data is absolutely necessary. The data will be processed insofar as the data is required for the execution of the contract or for the fulfilment of further legal e.g. product liability obligations and duties (e.g. duties to inform, clarify and warn).
4.2 Application process
For the application procedure there are additional data protection notices which will be communicated separately within the application.
4.3 Participation in events and on-site visits
We are looking forward to meeting you personally during a visit on site or at one of our events. We process your personal data in order to organize and carry out events and to provide you with information material. In the case of events, we may forward the data to the speakers and participants. This is important to ensure the smooth running of the event. We also use the data collected in this process to evaluate and post-process our events.
For the documentation of the events as well as the press and public relations work picture and video recordings of the events can be provided. Personal (image) data will also be processed. You may object to this processing. In this case we ask you to inform the photographers or organizers of these reasons in advance. They will take your objection into account and take the necessary measures.
4.4 Use of services (consulting)
In addition to our products and system solutions, REHAU offers various services. This also includes consulting and services which we offer by telephone, e-mail, contact form and possibly also on site. With this service we would like to support you in the selection of the REHAU systems and their application.
Within the context of this service, the necessary data that you provide in connection with the service request, such as contact data / personal master data (surname, first name, address, e-mail address, etc.) may be stored together with the products concerned and the problem. In this way, we want to ensure that we can provide you with targeted further advice in the event of any queries at a later date on the basis of the previous service history. The basis of this storage is the justified interest in an effective and consistent consulting activity, even over time. Your data will only be stored in direct connection with the service case. As far as the service data are relevant for the defense against claims of liability, especially product liability, REHAU will also process them for this purpose. The data will be deleted if they are no longer required for this purpose, at the very latest after the end of the limitation periods existing for this liability.
4.5 Access to the company premises for the delivery of goods or performance of a service or work performance
In this case, we collect not only your data which are directly necessary for the execution of a contractual relationship, such as name, first name, company, invoice data, vehicle identification data, but also the duration of your stay at REHAU. In the event of an emergency and a necessary evacuation, the aim is to have knowledge of the persons staying in the building or on the premises. If you are on business, the duration of your stay can also be used to check and optimize internal processes and to check the conclusiveness of performance data (e.g. invoices).
When goods are delivered, cameras are also used to monitor logistical processes at various locations.
Video surveillance at our locations only takes place openly. Appropriate signs will point this out to you. This video surveillance serves to secure our production and our data processing systems. This ensures even greater protection of personal data.
4.6 Corporate communication and external image
As part of our participation in events, the visit to our trade fair presence and other events, images and video recordings of these events are made to document the event for press and public relations work and corporate communications. Personal (image) data is also processed in this process.
The publication of the image material takes place both electronically in social media such as Facebook and in print media.
As far as factually possible and legally reasonable, reference will be made again to the photographs at each individual event. We will be happy to provide you with details of the event in question.
4.7 Compliance, law enforcement and crime prevention
To the extent required by law, REHAU uses personal data to assert legal claims and to defend legal disputes. Within the context of the company's compliance requirements, the data may also be used to prevent, clarify or prevent criminal offences. In addition to the previously mentioned data categories insofar as they are required for the purpose, creditworthiness data, visit data, account data as well as correspondence, purchasing and sales data are also used for this purpose. REHAU also uses an internal whistleblower system for name and anonymous reports of compliance violations. This data will be deleted or made completely anonymous in accordance with the applicable legislation or immediately after the respective case has been concluded.
Security is generally also served by systems for building and plant security as well as for securing our data processing systems, such as access controls or video surveillance. The mentioned controls only take place openly at our sites. You can find out more about them in detail on site.
We process your personal data further in connection with the usual checks of business partners within the framework of compliance requirements. Insofar as we have not requested your personal data directly from you, we have collected them from publicly accessible sources and databases as part of the due diligence. The data collected from these sources are processed exclusively for this purpose and deleted as soon as they are no longer required for this purpose.
4.8 Advertising communication and market research
As far as legally permissible or if you give us your consent, we process your data in particular for advertising communication, customer satisfaction surveys, advertising campaigns and for the implementation of sweepstakes. In this way, we can further improve our range of products and services and act in a more targeted manner.
Within the context of these activities, the necessary data such as contact data / personal master data (surname, first name, address, e-mail address, etc.) can be processed.
For the purposes mentioned it may be necessary for us to pass on your personal data to companies of the REHAU Group in order to better respond to your wishes or to continuously improve our products and services. In each case you can disagree with the use of your data for purposes of direct advertising.
For the further development of our products, services and business processes as well as for market research, we analyse the data available to us on business transactions, contracts and enquiries. It is in no way possible to draw conclusions about individual natural persons.
4.9 Compliance with legal obligations
REHAU is subject to a number of legal obligations regarding the processing and storage of personal data. These relate, for example, to commercial and tax retention regulations in accordance with the commercial code and the tax code.
In order to meet these obligations, we process your data to the required extent and, if necessary, pass them on to the responsible authorities within the framework of statutory reporting obligations.
4.10 Further processing purposes
Data processing also takes place within the context of quality management to determine and improve customer satisfaction, to further develop products and services, to carry out research and development and to improve IT security and IT operations. The last point also includes processing to identify and prevent unauthorized access to personal data.
4.11 Transfer of data
We may share your personal information with other REHAU companies for the purposes described in this privacy statement. The other companies may use your personal data in their own interest for the same purposes as we do. In particular, they may process your personal data for the above-mentioned purposes in their own interest.
Within the REHAU Group, employees only have access to your personal data insofar as this is necessary for the performance of their duties.
For the aforementioned purposes, the data may be disclosed to third parties outside the REHAU companies who assist the controller in the pursuit of the mentioned purposes.
Our service providers are contractually obliged to process personal data exclusively on our behalf and according to our instructions. We also oblige our service providers to comply with technical and organizational measures that ensure the protection of personal data. For more information, please contact us.
5. Duration of storage
We store your personal data only as long as it is necessary for the purposes for which it was collected or as long as storage is required by law or within the framework of official regulations. We delete or block your data as soon as they are no longer needed.
Furthermore, we will delete or block your data immediately in the event of a revocation of your consent and in the event of a justified objection to the processing.
6. Data security
We have technical and organizational security procedures in place to protect the security of your personal data and to protect your personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access.
7. Your rights
If you have further questions, please contact us. In particular, we will consider their following concerns and righs:
- Information Law
- Right to access your processed data
- Right to object
Right for disagreement against direct advertising
Right of correction, deletion and limitation