Data Privacy Protection
REHAU is pleased about your interest in our company and our products. We want you to feel comfortable when you contact REHAU. For this reason, the security of your personal data, such as your name, address, telephone number or e-mail address used when you contact REHAU, is important to us.
This privacy policy is intended for anyone with whom REHAU interacts, including customers, suppliers, service providers, other business partners, prospects, visitors of our websites, users of our apps/applications, other users of our products or services, and visitors to our sites (hereinafter referred to as “you”). It contains the information described in Art. 13 and 14 of the GDPR.
Further information on the data protection of the social media company presences used by REHAU can be found at www.rehau.com/uk-en/privacy-policy-social-media.
1. Terms
The processing of personal data takes place within the guidelines of legal regulations.
The Term "personal data" refers to all information relating to an identified or identifiable natural person. "Processing" means any operation or set of operation which is performed on personal data whether or not by automated means such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
Further data protection terms are used in accordance with the definitions in Art. 4 GDPR.
2. Name and address of the controller
REHAU Ltd
Hill Court
Walford
Ross-on-Wye
Herefordshire
HR9 5QN
VAT identification number: 578184008
Email: gdpr-uk@rehau.com
3. General processing purposes and legal bases
REHAU collects and processes your personal data in particular in the following cases:
- If you contact us directly e.g. via our website, via REHAU customer service or if you visit us at our locations, participate in our events, customer satisfaction surveys and competitions and are interested in our products or services or have any other concerns.
- If you or your employer buy products or services directly from us.
- If you or your employer request information about our products and services (e.g. sending brochures or price lists).
- If you buy or use REHAU products.
- If you or your employer offer or sell us products or services.
Please help us keep your information current by informing us of changes to your personal data, in particular your contact details.
Insofar as REHAU processes personal data, this applies in particular to your name and your official contact data such as company, function, telephone number or e-mail address as well as contract and transaction data. Additional data categories may be collected for special purposes described in detail below.
Besides the collection of your data from our contact forms on our website, we also collect the data directly from you or from generally accessible sources (e.g. commercial register, authorities and internet) to the necessary extent for the purpose.
4. Individual processing purposes and legal bases
In the following we inform you for which purposes REHAU processes which personal data. In the case of nonrecurring circumstances, REHAU will generally draw your attention to this information separately in the specific processing situation and, if necessary, provide additional information.
4.1. Processing of data for the preparation, conclusion and performance of contracts
4.1.1. General
As a manufacturing company, REHAU processes personal data within the scope of acquisition (also under 4.11.) and sales processes as well as for the execution of contracts. For this purpose, data is processed in particular for appropriate communication and salutation, contract initiation, quotation processing, customer consulting, procurement, production and delivery of goods, contract management and complaints processing.
Within the context of these activities, the following data categories are processed in particular:
- Contact data/ personnel master data (title, last name, first name, address, e-mail address etc.)
- Logistics data such as delivery address
- Contract data, payment data
It may be necessary for us to pass on the data for the preparation of an offer and the execution of the contract to third parties who are integrated into the supply chain or otherwise required for the execution of the contract.
REHAU has a Track&Trace platform that provides information about the transport of consignments at all times. In this context, we also use your e-mail address to share this information with you. Once the goods have been dispatched, we will send you an automatic e-mail with the shipping documents and a link to track the consignment on the Track&Trace platform. The legal basis for this use is the legitimate interest within the meaning of Art. 6 I f GDPR to enable you to track your consignment.
For the purpose of credit checks of our business partners, we process data which we receive under the legal requirements of credit agencies (such as Schufa). In addition, to further minimize the risk of default, REHAU reserves the right to report payment experiences with customers to a payment experience pool of a scoring company (Creditreform, Bisnode). This does not apply to payment experiences with natural persons.
In order to optimize financial transactions, REHAU reserves the right to assign receivables from its business customers to a refinancing company as part of receivables financing. Only company-related data (name of debtor, reason, amount, due date of the receivable) will be passed on for the purpose of receivables financing. Insofar as necessary for the verification of the receivable, the refinancing company will pass on the aforementioned company data to third parties for credit assessment.
The legal basis for debt financing/factoring is, insofar as personal data is involved in exceptional individual cases, Art. 6 I f GDPR.
If data is collected directly for the processing of an inquiry or the execution of a contract, REHAU will inform you which data is absolutely necessary. If it is not you yourself but your employer or another third party which is contractually connected with you or your employer which is the contracting party, the data will be processed on the basis of Art. 6 I f GDPR. The data will be processed insofar as the data is required for the execution of the contract or for the fulfilment of further legal e.g. product liability obligations and duties (e.g. duties to inform, clarify and warn).
If processing is carried out on the basis of Art. 6 I f GDPR, you can always object the processing on grounds relating to your particular situation.
4.1.2. Communication
Microsoft Teams
REHAU uses Microsoft Teams to communicate effectively with you and to share information. In some cases, it may be necessary to record or transcribe meetings to make important content and discussions available for future reference or for those people unable to attend. We would like to explain to you how we handle your personal data in connection with the recording of meetings.
Before each recording, the meeting lead will inform you that the recording is about to start. If you do not want any images of you to be recorded, you can choose to deactivate your camera.
The meeting lead will decide whether a recording is necessary, taking into account the interests of the persons concerned. A recording or transcript may be required for the following reasons:
- Documentation and tracking of meeting content – evidential function
- Knowledge sharing and training purposes
- Provision of the recording for participants unable to attend
- Information archiving for future reference
Legal basis for the processing of this data is Art. 6 I f GDPR. Our legitimate interest lies in the effective organisation of meetings and in documenting the meeting contents. You can object to the recording at any time for reasons arising from your particular situation. Please inform the meeting lead if you wish to do so.
If you have activated your system's video camera and the recording also extends to this video content, this recording is deemed to take place on the basis of your consent in accordance with Art. 6 I a GDPR. If, after the recording has started, you switch on your camera or decide not to switch it off, you are deemed to consent to the recording of the video content.
You can revoke this consent at any time without giving reasons by switching off the camera function on your end device.
When meetings are recorded via Microsoft Teams, the following personal data may be collected:
- Personal master data, such as name, display name, profile picture and e-mail address of the participants
- Data on company affiliation and position within the company
- Audio and video data of the participants; the audio files are automatically transcribed
- Chat messages, preferred language and shared files during the meeting
- Screen-sharing and presented content
- Meeting metadata, e.g. date, time, meeting ID, telephone numbers, location
We store your personal data only as long as it is necessary for the purposes for which it was collected or as long as storage is required by law or within the framework of official regulations. We delete or block your data as soon as they are no longer needed. Furthermore, we will delete or block your data immediately in the event of a revocation of your consent and in the event of a justified objection to the processing.
Please note that the recording is made available to every meeting participant in most cases. If the purpose of the recording is to inform third parties or other persons about the content of the meeting, they will also receive the data. The respective recipient of the data is responsible for its further processing, including deletion. If the purpose of the recording requires it, the data may also be transmitted to REHAU companies outside the European Economic Area. This takes place either on the basis of an adequacy decision by the Commission or on the basis of standard contractual clauses that contain appropriate safeguards for the data subject.
Answering machine function
When using the answering machine of REHAU Group employees, the message is automatically transcribed. The spoken text is sent as a file by e-mail to the subscriber and displayed there in the original language and with an English translation. This e-mail is subject to the retention period stipulated for e-mails.
WhatsApp Business
Some divisions allow you to contact REHAU via WhatsApp if you have any questions. By contacting us via WhatsApp, you agree that we may receive your telephone number and access to your WhatsApp profile (incl. profile picture). Data processing for the purpose of contacting us takes place in accordance with Art. 6 I a GDPR on the basis of the consent you voluntarily provided.
The personal data collected by us through the use of WhatsApp will be automatically deleted after your enquiry has been dealt with. We usually assume that the matter has been dealt with 90 days after the final response from us, as normally no further queries are to be expected after this period has expired. You can also revoke your consent at any time by sending a message to your WhatsApp contact at REHAU.
If your enquiry is related to the preparation of a contract, the legal basis is Art. 6 I b GDPR. In this case, we store your data for the duration of the statutory retention periods. In addition, the data protection provisions of WhatsApp Inc. apply when using WhatsApp: https://www.whatsapp.com/legal.
4.2. Use of customer portal
REHAU offers its customers the use of a customer portal to simplify the processing of orders for access to certain product configurators and other services. With the registration you will be informed which data is necessary for the use of the customer portal. Purpose and legal basis are described in section 4.1. Furthermore optional data will be used to contact the customer (according to section 4.11).
When using the customer portal, the individual transactions are stored and archived in accordance with the legal storage regulations based on Art. 6 I c GDPR.
You can terminate the use of the customer portal and the storage of your personal data in the customer portal at any time as long as they are not necessary for the fulfillment of a contract. Please contact your relevant sales office. The storage of the transactions remains unaffected.
On the customer portal, REHAU allows you to scan product barcodes/QR codes for defined products via a URL and integrate them directly into an order. Only the personal data collected during registration for the customer portal is used here. The BootstrapCDN and Cloudflare functions are set as necessary cookies for this action.
4.3 Use of the supplier portal
REHAU maintains a supplier portal. When registering as a supplier, you will be informed of the type and scope of the data required for registration. This data is used for all business processes in relation to the procurement of goods and services, including measures for quality assurance, management of supplier relationships, processing of contracts, risk management, use of information and communication systems, optimisation of internal processes, and administration of the supplier portal. For these purposes, it may also be necessary for us to pass on your personal data to other companies in the REHAU Group and for these Group companies to contact you.
4.4. Application process (Art. 6 I b GDPR)
For the application procedure there are additional data protection notices which will be communicated separately within the application. The following information also applies to all applications.
4.5. Participation in events and on-site visits (Art. 6 I f GDPR)
We are looking forward to meeting you personally during a visit on site or at one of our events. We process your personal data in order to organize and carry out events and to provide you with information material. In the case of events, we may forward the data to the speakers and participants. This is important to ensure the smooth running of the event. We also use the data collected in this process to evaluate and post-process our events. As a rule, you will receive further data protection information when you register for an event.
REHAU also uses the Microsoft Forms to gain feedback. If you participate in a corresponding survey, the privacy statement of Microsoft Forms applies: https://www.microsoft.com/en-gb/privacy/privacystatement.
For the documentation of the events as well as the press and public relations work picture and video recordings of the events can be provided. Personal (image) data will also be processed. You may object to this processing at any time for reasons arising from your particular situation. In this case we ask you to inform the photographers or organizers of these reasons in advance. They will take your objection into account and take the necessary measures.
4.6. Use of services (consulting, dealer finder)
4.6.1. General information
In addition to our products and system solutions, REHAU offers various services. This also includes consulting and services which we offer by telephone, e-mail, contact form and possibly also on site. With this service we would like to support you in the selection of the REHAU systems and their application.
Within the context of this service, the necessary data that you provide in connection with the service request, such as contact data / personal master data (surname, first name, address, e-mail address, etc.) may be stored together with the products concerned and the problem. In this way, we want to ensure that we can provide you with targeted further advice in the event of any queries at a later date on the basis of the previous service history.
As part of the retailer search, we allow you to directly provide both us and your chosen retailer with your contact details for a contact type defined by you. The retailer processes this data under its own responsibility for the purposes of the enquiry. REHAU uses this data to check the quality of the service provided by the retailer.
The basis of this storage is the justified interest in an effective and consistent consulting activity, even over time. Your data will only be stored in direct connection with the service case. As far as the service data are relevant for the defense against claims of liability, especially product liability, REHAU will also process them for this purpose. The data will be deleted if they are no longer required for this purpose, at the very latest after the end of the limitation periods existing for this liability.
If the data is only processed on the basis of Art. 6 I f GDPR, you have the right to object the processing on grounds relating to your particular situation.
Further specific data protection information can be found in the respective terms of use for the individual applications.
4.6.2. Window configurator
Where using the window configurator is concerned, REHAU collects the data required for the calculation of the windows, the selection of a suitable service provider and communication with you via a contact form. The data can be shared with one or more window manufacturers selected by REHAU for the preparation of a non-binding offer. The following necessary cookies are set for the function of the application:
- ARRAffinity & ARRAffinitySameSite (Vendor AZURE)
- ai_session
- ai_user
- raygun4js-userid (Vendor Raygun)
- sencha-localstorage-test
- CbnStorageTestKey
- testItem
- loginData
- planWatches
- 1168217078_userCompanies
- _ext:/Cfgr/REHAU/WINDOWECChttps://portal.combeenation.com/cfgr/classic.json-9cdfa28e-b030-4181-a9b8-689d067ddc15
- [Weekday] [Month] [DD] [YYYY] [HH]:[II]:[SS] GMT*
The legal basis is Art. 6 I b GDPR; the data collected is required for the provision of the service. Further information on the processing of your data within the scope of the window configurator can be found in the terms of use for the window configurator.
4.6.3. REHAU Window.ID
REHAU provides the Window.ID system as a processor. This allows users to permanently store and analyse product data on windows and window components in order to offer their customers a better service. The respective Window.ID user is responsible for the collection and use of this data. Users or end customers can also determine the respective location of the window via GPS and save it in the Window.ID. No personal data is transferred when the GPS data is saved.
REHAU uses the Window.ID data, which is non-personal information, for the following purposes:
- Developing new business models and services
- Developing strategies for customers to optimise their market position
- Supporting the recycling process after the end of service life
- Analysing REHAU's market position
- Analysing the use of REHAU services
4.7. Access to the company premises for the delivery of goods or performance of a service or work performance
In this case, we collect not only your data which are directly necessary for the execution of a contractual relationship, such as name, first name, company, invoice data, vehicle identification data, but also the duration of your stay at REHAU on the basis of Art. 6 I f GDPR. In the event of an emergency and a necessary evacuation, the aim is to have knowledge of the persons staying in the building or on the premises. If you are on business, the duration of your stay can also be used to check and optimize internal processes and to check the conclusiveness of performance data (e.g. invoices).
Video surveillance at our locations only takes place openly. Appropriate signs will point this out to you. This video surveillance serves to secure our production and our data processing systems. This ensures even greater protection of personal data.
In addition, when goods are delivered, cameras are used to monitor logistical processes at various locations.
On the basis of legal requirements or Art. 6 I f GDPR to prove the fulfilment of road safety obligations, the safety instructions given to the visitor are also documented.
Of course you can disagree with the uses on the basis of Art. 6 I f GDPR at any time on grounds relating to your particular situation.
4.8. Corporate communication and external image (Art. 6 I f GDPR)
As part of our participation in events, the visit to our trade fair presence and other events, images and video recordings of these events are made to document the event for press and public relations work and corporate communications. Personal (image) data is also processed in this process.
The publication of the image material takes place both electronically in social media such as Facebook and in print media. Legal basis for this processing is Art. 6 I f GDPR for corporate communication as well as § 23 of the German copyright law as applicable.
As far as factually possible and legally reasonable, reference will be made again to the photographs at each individual event. If the processing of the pictures takes place on the basis of Art. 6 I f GDPR, you can object to this use at any time on grounds relating to your particular situation. You can exercise this right by informing the photographer of these reasons in advance and he will take this into account in his work. We will be happy to provide you with details of the event in question.
4.9. Compliance, law enforcement and crime prevention (Art. 6 I f GDPR)
To the extent required by law, REHAU uses personal data to assert legal claims and to defend legal disputes. Within the context of the company's compliance requirements, the data may also be used to prevent, clarify or prevent criminal offences.
In addition to the previously mentioned data categories insofar as they are required for the purpose, creditworthiness data, visit data, account data as well as correspondence, purchasing and sales data are also used for this purpose. REHAU also uses an internal whistleblower system for name and anonymous reports of compliance violations. This data will be deleted or made completely anonymous in accordance with the applicable legislation or immediately after the respective case has been concluded.
Security is generally also served by systems for building and plant security as well as for securing our data processing systems, such as access controls or video surveillance. The mentioned controls only take place openly at our sites. You can find out more about them in detail on site.
We process your personal data further in connection with the usual checks of business partners within the framework of compliance requirements. Insofar as we have not requested your personal data directly from you, we have collected them from publicly accessible sources and databases as part of the due diligence. The data collected from these sources are processed exclusively for this purpose and deleted as soon as they are no longer required for this purpose. The processing is based on Art. 6 I c GDPR insofar as the due diligence is based on legal requirements or on Art. 6 I f GDPR the legitimate interest of the company in the evaluation of its business partners for the reduction of risks. If the processing is based on Art. 6 I f GDPR, you can object to this on grounds relating to your particular situation.
4.10. Advertising communication and market research
As far as legally permissible on the basis of Art. 6 I f GDPR or if you give us your consent (Art. 6 I a GDPR), we process your data for advertising communication, customer satisfaction surveys, advertising campaigns, the organisation of competitions and for other market and competitive analyses. In this way, we can further improve our range of products and services and act in a more targeted manner.
Within the context of these activities, the necessary data such as contact data / personal master data (last name, first name, company, address, telephone number, IP address, e-mail address, etc.) can be processed. Other data (1) that you provide to us for this purpose, such as interests, personal preferences, professional situation, or (2) that we collect through the analysis, individual measurement, storage and evaluation of opening rates and click rates in recipient profiles in order to design newsletters or other forms of communication, will only be processed if you have given your consent.
In the case of an existing customer relationship or if you have consented to this, you will generally receive the above information by electronic mail. For business partners who are not consumers, the information is provided by telephone or analogue.
As part of our legitimate interest, we analyse the data available to us (e.g. on business transactions, contracts, enquiries and other relevant business behaviour) for the further development of our products, services and business processes as well as for market research.
For all the aforementioned purposes, it may be necessary for us to share your personal data with third parties who support us in the pursuit of our objectives as part of order processing. For the purposes mentioned it may be necessary for us to pass on your personal data to companies of the REHAU Group in order to better respond to your wishes or to continuously improve our products and services.
Of course we respect it if you do not want us to use your personal data to support our customer relationship - in particular for direct marketing or market research. In each case, you can disagree with the use of your data for purposes of direct advertising at any time according to Art. 21 II GDPR or revoke a corresponding consent at any time according to Art. 7 III GDPR with effect for the future. You can send your revocation of consent or objection to processing to any of the contact options listed in the legal notice. You can also unsubscribe from newsletters at any time using the unsubscribe link at the end of each e-mail.
4.11. Surveys
We use the "Microsoft Forms" tool for external enquiries and queries, such as evaluating campaigns that have been carried out, registering for company events, etc. Microsoft Forms is a service provided by Microsoft Ireland Operations Limited. The data of users from the European Union is processed within the European Economic Area (EEA).
Nevertheless, data may have to be processed at the headquarters of Microsoft Inc. in the USA in order to provide the service and in the context of support. We have agreed the EU standard contractual clauses with Microsoft for any necessary data transfer to third countries (see below). Section 6). Microsoft has taken technical and organisational measures to ensure appropriate data protection. In particular, data is only transmitted in encrypted form via Forms. Furthermore, Microsoft has contractually committed to legally defend against disclosure requests from US authorities as far as possible. Microsoft can generally be regarded as a processor. You can find more information about data protection at Microsoft at https://www.microsoft.com/en-gb/privacy/privacystatement.
When using Microsoft Forms, various types of data are processed. The scope of the data depends on the questions asked and any upload of additional services. In general, the following personal data is involved:
- Last name, first name
- E-mail address
- Preferred language
- Status (optional, if maintained in Microsoft 365)
- Date and time of opening the questionnaire
- Date and time of sending the response
If you participate in an anonymous survey, your response will not contain any contact information and cannot be traced back to you. The data from surveys/forms/questionnaires (questions and answers) is stored in the Microsoft Cloud and retrieved from there by the project team. In principle, all personally identifiable data is deleted within one year after the purpose has been served.
Participation in our surveys is voluntary. Insofar as consent is given by participating in the survey, the legal basis shall then be Art. 6 I a GDPR. Any consent provided can be revoked at any time with effect for the future. There shall be no disadvantages in the event of revocation or non-granting of consent.
Personal data processed in connection with the participation in Microsoft Forms surveys and forms will not be shared with third parties unless the data is intended for sharing or is necessary to fulfil the purpose. Data may be shared with external service providers who are engaged in order to fulfil the purpose for which it was collected.
4.12. Compliance with legal obligations (Art. 6 I c GDPR)
REHAU is subject to a number of legal obligations regarding the processing and storage of personal data. These relate, for example, to commercial and tax retention regulations in accordance with the commercial code and the tax code.
In order to meet these obligations, we process your data to the required extent and, if necessary, pass them on to the responsible authorities within the framework of statutory reporting obligations.
4.13. Other processing purposes
Data processing also takes place within the context of quality management to determine and improve customer satisfaction, to further develop products and services, to carry out research and development and to improve IT security and IT operations. The last point also includes processing to identify and prevent unauthorized access to personal data.
Legal basis for the processing of these data is art. 6 I f GDPR. Insofar as no consent is given, no conclusions can be drawn about individual natural people.
In individual cases this processing can be objected on grounds relating to your particular situation.
4.14. Transfer of data to third parties
For the aforementioned purposes, the data may be disclosed to third parties who assist the controller in the pursuit of the mentioned purposes. The passing on takes place in the context of an order processing within the sense of Art. 28 GDPR, a joint responsibility according to Art. 26 GDPR or as data transfer in the context of the order of professional services.
For data transfer to recipients in third countries (see point 6 below).
5. Duration of storage
We store your personal data only as long as it is necessary for the purposes for which it was collected or as long as storage is required by law or within the framework of official regulations. We delete or block your data as soon as they are no longer needed.
Furthermore, we will delete or block your data immediately in the event of a revocation of your consent and in the event of a justified objection to the processing.
6. Planned transfer of data to third countries
We may share your personal information with other REHAU companies for the purposes described in this privacy policy. The other companies may use your personal data in their own interest for the same purposes as we do. In particular, they may process your personal data for the above-mentioned purposes in their own interest. Within the REHAU Group, employees only have access to your personal data insofar as this is necessary for the performance of their duties.
Data is transferred to branches outside the European Economic Area either on the basis of an adequacy decision of the Commission (Art. 45 III GDPR) or on the basis of standard data protection clauses (Art. 46 II c GDPR) which contain appropriate guarantees for the data subject. The text containing standard contractual clauses has been published at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
We may also disclose your personal information to third parties outside the REHAU companies to use technical or organisational services that we need to fulfil for the purposes mentioned above or for our other business activities. Our service providers are contractually obliged to process personal data exclusively on our behalf and according to our instructions. We also oblige our service providers to comply with technical and organizational measures that ensure the protection of personal data. If the service providers are located in countries where the applicable laws do not provide for the protection of personal data comparable to European law, we will contractually ensure that the relevant service providers comply with the statutory level of data protection (standard data protection clauses or EU-US Privacy Shield Framework). For more information, please contact our data protection officer.
7. Online data usage/visiting our websites
In the following, you will learn which information we may collect when you visit our websites and how we deal with it. REHAU’s websites may contain links to websites of other providers which are not covered by this data protection declaration.
When you visit our website, we store information about the browser and operating system you are using, the date and time of your visit and the IP address. These data are required for the web pages to function, in particular to ensure flawless connectivity and to guarantee a reasonable user experience on our website. We cannot associate these data with your person.
We will not collect any personal data via our websites without your consent. You alone decide whether or not you wish to disclose such data to us in the context of a registration, order or survey.
In addition, we use the following technologies on our website:
7.1. Chatbot
If you use our "Chatbot" service (for example, via our website https://www.rehau.com or within mobile apps), personal data, including chat histories, IP addresses and cookies, is collected and stored by the service providers Amazon Web Services, Inc. and Google Ireland Limited. This information is required for providing the service. You can find more information at https://aws.amazon.com/privacy and https://policies.google.com/privacy?hl=en-GB.
7.2. Google Analytics – web analytics
This website will use Google Analytics, a web analysis service offered by Google Inc., provided you consent to the use of such on our websites’ cookie splash pages. Google Analytics uses cookies. Cookies are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. REHAU has activated IP anonymisation on this website. This means that your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the link https://tools.google.com/dlpage/gaoptout?hl=en.
The data we collect at user and results level, which is linked to cookies, user IDs and advertising IDs, is automatically deleted after 14 months. The retention period of the user ID is reset to 14 months with each new event (e.g. page view) of this user on our website. Standard summarised Google Analytics reports are not affected by this.
Further information on terms of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/gb or at https://policies.google.com/?hl=en.
We would like to point out that, on our website, Google Analytics has been extended by the code “gat._anonymizeIp();” in order to guarantee anonymous IP address recording (so-called IP masking).
7.3. Google Tag Manager
Google Tag Manager is a solution that allows website tags to be managed via an interface. The Tag Manager itself does not collect personally identifiable information. The tool triggers other tags and is therefore required so that REHAU can provide a telemedia service that you have expressly requested. The Google Tag Manager itself does not access personal data.
If deactivation is made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager. Google’s privacy policy for this tool can be found here: https://policies.google.com/?hl=en.
7.4. Google Ads Remarketing
Our website will use the functions of Google Ads Remarketing, provided you consent to the use of such on our websites’ cookie splash pages. This allows us to advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited. To this end, Google places a cookie in the browser of your end device, which automatically uses a pseudonymous cookie ID to enable interest-based advertising based on the pages you visit.Further data processing will only take place if you have agreed to Google linking your internet and app browsing history to your Google account, and using information from your Google account to personalise advertisements you view on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. Google will temporarily link your personal data to Google Analytics data in order to create target groups. You can permanently disable the setting of ad personalisation cookies by downloading and installing the browser plug-in available at the following link: https://adssettings.google.com/authenticated?hl=en.
Alternatively, you can visit the Digital Advertising Alliance under www.aboutads.info to obtain information about setting cookies and adjust your cookie settings. Finally, you can adjust your browser settings so that it informs you about cookies that are being stored, allowing you to decide if you want to accept them individually, in certain cases only, or reject them in general. If you do not accept cookies, the functionality of our website may be limited.
Further information and the data protection regulations regarding advertising and Google are available here: https://policies.google.com/technologies/ads?hl=en.
7.5. Google reCAPTCHA
In our contact forms, which you can use to send service and information requests to REHAU, we use the service reCAPTCHA by Google.
The service is used to recognise malicious attacks on our websites by differentiating entries made by a human being from those made by automated machines. The use of this application is necessary for providing the service REHAU offers through its contact form, and is thus based on Art. 6 l b of the GDPR. It is required for providing the services, as otherwise the website would not be adequately protected against automated surveillance, misuse and spam. Hence, using the application is also in the best interest of service recipients. In the process, your entry is transferred to Google and further processed. The data transferred to Google includes your IP address and possibly other data used by Google for the service.
The use of Google reCAPTCHA is inextricably linked to Google Fonts. If you use Google reCAPTCHA, fonts are loaded via a Google server without us or you being able to prevent this. Google Fonts are fonts from Google Inc. Google Ireland Limited is responsible for the European area. Details on data protection issues relating to Google Fonts can be found at https://developers.google.com/fonts/faq/privacy.
In principle, no more or other personal data is processed via Google Fonts than is necessary for the use of Google reCAPTCHA. The legal basis for the use of Google Fonts in connection with the use of reCAPTCHA is the legitimate interest in protecting against automated spying, misuse and spam.
Please note therefore that you can only use our contact forms if you consent to the use of Google reCAPTCHA (and Google Fonts) for the purpose of protecting the site. During this process, your data may, in exceptional cases, be processed in countries outside of the European Union without an adequate data protection level (so-called third countries). In order to guarantee an adequate level of data protection even in such cases, we take additional measures according to Art. 44 ff of the GDPR and thereby ensure that the data transfer is generally permissible (e.g. by establishing EU standard contractual clauses).
Further information about Google reCAPTCHA and the data protection declaration are available at https://www.google.com/recaptcha/intro/v3.html or https://www.google.com/privacy.
The entity responsible for this data processing is Google Ireland Limited. The following data are forwarded to the responsible entity for the independent provision of the service, i.e. defence against malicious attacks: Your web enquiry, the IP address, the browser type, the browser language, the date and time of your enquiry, one or several cookies, which under certain circumstances identify your browser.
If you object to the use of Google reCAPTCHA, you must not fill in the contact forms in which Google reCAPTCHA is used.If you would like to take advantage of the services offered by REHAU without the use of Google reCAPTCHA, please feel free to write us an e-mail or letter any time. We will then address your enquiry through another channel.
7.6. Facebook-Plugin
This website will use “visitor action pixel” provided by Facebook Inc., provided you consent to the use of such on our websites’ cookie splash pages. This allows companies to track users’ behaviour after they click on a Facebook ad that redirects them to the vendor’s website. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help optimise future advertising efforts. The data collected is anonymous to us and therefore does not provide us with any information about the identity of the user. However, the data is saved and processed by Facebook, meaning a connection to the relevant user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook data usage guidelines: https://facebook.com/about/privacy. The data may facilitate ads being shown by Facebook and its partners on and outside Facebook. A cookie may also be stored on your computer for these purposes.
7.7. Facebook Remarketing
Our website will use the remarketing function “custom audiences” offered by Facebook Inc., USA, provided you consent to the use of such on our websites’ cookie splash pages. This function serves to target visitors to the website with interest-related advertising in the social network Facebook. For this purpose, the remarketing tag of Facebook was implemented on the website. This tag establishes a direct connection to the Facebook servers when you visit our website. It tells the Facebook servers which of our pages you have visited. Facebook associates this information with your personal Facebook user account. When you visit Facebook, you will be shown personalised, interest-based Facebook ads.
You can deactivate the remarketing function “custom audiences”. Further information on the collection and use of data by Facebook, on your rights in this regard and on ways of protecting your privacy can be found in Facebook’s data policy at https://facebook.com/about/privacy.
7.8. Facebook Lead Ads
We will use Facebook lead ads in order to obtain the contact data of users who show interest in our products and services on Facebook, provided you consent to the use of such on our websites’ cookie splash pages. This extends our ads on Facebook by further options for interaction, in particular the option for the user to request further information about our products and services through a contact form. When an interested user submits such a form, the data entered by the user are stored by Facebook as a lead and sent to us. We use these data only for the purpose referenced in the lead ad. They may include, for example, a name for personal contact, an e-mail address for sending the desired product information, or a phone number for establishing contact by phone. Further information on lead ads is available directly from Facebook at https://facebook.com/about/privacy.
7.9. LinkedIn Ads
If you give your consent in the cookie preference pages for our website, we will use website conversion tracking on our website via the LinkedIn Insight Tag from LinkedIn Ads. LinkedIn Ads is the advertising platform of LinkedIn Ireland Unlimited Company. The LinkedIn Insight Tag enables us to analyse the behaviour of users who land on our website via our advertising within the LinkedIn advertising network and to subsequently optimise our website and advertising measures.
If you interact with our advertising within the LinkedIn advertising network, we only learn about the overall behaviour of all users and do not collect any personal data in the process. Please note that IP addresses are always transferred with every HTTP request (e.g. when data is sent from your browser to a third-party provider, such as LinkedIn) and we have no knowledge of the use of the IP address by third-party providers. The collection of IP addresses can be completely blocked in certain browsers.
Please note that your data is usually transferred to a LinkedIn server in the United States of America, outside the EEA, and stored there. To protect your data, we have accepted LinkedIn's "Data Processing Terms", in which LinkedIn also undertakes to act in accordance with European data protection regulations with regard to your data. We would like to point out that in a third country such as the United States of America no suitable data protection guarantees and no adequate level of data protection can be guaranteed.
You can find LinkedIn's data processing conditions at the following link: https://www.linkedin.com/legal/l/dpa. LinkedIn's privacy policy can be found at the following link: https://www.linkedin.com/legal/privacy-policy.
Data processing is carried out in accordance with Art. 6 I f GDPR on the basis of our legitimate interest in optimising our website and advertising measures. The legal basis for the use of website conversion tracking by LinkedIn Ads on our website is your consent in accordance with Art. 6 I a GDPR. You can revoke your consent at any time by changing your cookie settings on our website accordingly.
7.10. LinkedIn Matched Audiences
Our website will use the retargeting function offered by LinkedIn Ads, provided you consent to the use of such on our websites’ cookie splash pages. We create user-defined target groups ("matched audiences") based on the behaviour of users who have interacted with our website, our content on LinkedIn (e.g. company page) or with our advertising within the LinkedIn advertising network in order to display personalised advertising to these users within the LinkedIn advertising network or to exclude certain target groups in our advertising measures. In order to protect the privacy of individual users, the retargeting target group must consist of at least 300 users before personalised advertising can be displayed to these users.
We also use the customer matching function of LinkedIn Ads to create customised target groups based on our customer data. This function enables us to reach potential or existing customers with personalised advertising within the LinkedIn advertising network.
The legal basis for using the retargeting and customer matching function of LinkedIn Ads is your consent in accordance with Art. 6 I a GDPR. You can revoke your consent at any time by changing your cookie settings on our website accordingly.
LinkedIn's privacy policy can be found at the following link: https://www.linkedin.com/legal/privacy-policy.
7.11. YouTube-Plugin
We will use plug-ins of YouTube LLC (represented by Google Inc.), among others, to integrate videos into our websites, provided you consent to the use of such on our websites’ cookie splash pages. In this case, a connection to the YouTube servers is established and the plug-in is displayed as soon as you use our website.Information on the pages you have visited will be transmitted to the YouTube server. If you are registered as a member of YouTube, YouTube will assign this information to your personal user account. If you use the plug-in, this information will also be assigned to your user account, for example after clicking the start button of a video. You can prevent this assignment by logging out of your YouTube user account and other YouTube LLC and Google Inc. user accounts before using our websites and by deleting the corresponding company cookies. You can find further information on data processing and tips on data protection from YouTube (Google) at: https://policies.google.com/privacy.
7.12. Microsoft-Plugin
Our website will use conversion tracking by Microsoft Corporation, provided you consent to the use of such on our websites’ cookie splash pages. Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing display. This allows both us and Microsoft Bing to recognise that someone clicked on an advertisement, was redirected to our website, and reached a previously determined target page (conversion page). We only know the total number of users who clicked on a Bing ad and were redirected to the conversion page. No personal information about the user's identity is shared. If you do not wish to participate in the tracking procedure, you can object to the setting of the cookies that are usually required for this, for example by adjusting your browser settings to deactivate the automatic storing of cookies in general. Further information on data privacy and the cookies used by Microsoft Bing can be found on the Microsoft website at: https://privacy.microsoft.com/en-us/privacystatement.
7.13. Outbrain
Our website will use the technology provided by Outbrain UK Ltd, provided you consent to the use of such on our websites’ cookie splash pages. It refers our users to further content within our website and on third-party websites that might also interest them. The recommendations for further reading integrated by Outbrain, e.g. below an article, are determined based on the content the user has read previously. To display these interest-based further content recommendations, Outbrain uses cookies. In order to anonymise the IP address, the last eight characters of the IP address are removed to guarantee full anonymisation.
You can object to tracking by Outbrain for the purpose of displaying interest-based recommendations at any time at https://my.outbrain.com/recommendations-settings/home.
7.14. Other cookies
Cookies are small text files that websites usually place on the end user’s PC. Cookies are used for a variety of purposes. However, they are never technologically risky because they lack any “active” ability. They cannot therefore execute any malicious applications. They contain almost exclusively information which is necessary for convenient Internet use. In addition, we have set ourselves a deadline for deleting cookies. Without your renewed permission, these are stored for a maximum of 12 months from the date of collection. To this end, we take technical steps to ensure automatic deletion.
Classic examples of cookie tasks include saving login data, shopping cart items, user analysis, form fields. Information saved in cookies may contain: Lifetime, server name, unique ID, content data.
Use of cookies:
- Function
Function or session cookies are purely technical cookies that are necessary for the proper functioning of our website.
All other cookies are only used if you consented to them on our cookie consent manager splash pages. We have structured these cookies as follows:
- Statistics
Statistics or tracking cookies are used in a completely anonymised form to evaluate user behaviour when they visit our website. REHAU and, if necessary, the responsible body, receive valuable information on how the website is used, which helps REHAU and, if necessary, the responsible body, to optimise the website to better appeal to visitors’ interests. - Marketing
In addition to our own cookies, we use third-party cookies to display personalised advertising on our own and other websites. This process is called “retargeting”. It is based on your activity on our website. - Other
The plug-ins used on our website also use their own cookies. You can find out about the types and purposes of these cookies on the pages specified by the third-party providers.
7.15. consentmanager
We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from Jaohawi AB, Sweden on our website in order to request consent for data processing or the use of cookies or comparable functions. consentmanager allows you to grant or refuse your consent for certain functionalities, in full or with some differentiation, according to individual functions of our website. This applies, for example, to the integration of external elements or streaming content, statistical analysis, reach measurement or personalised advertising.
You can change these settings at a later date. The purpose of integrating consentmanager is to give the users of our website the choice about the matters listed above and to allow them to change their current settings as they continue to use our website. Personal data and information about the end device used, such as the IP address, will be processed as part of using consentmanager.
The legal basis for this processing is Art. 6 I c in connection with Art. 6 III a in connection with Art. 7 I GDPR and alternatively Art. 6 I f. By processing this data, consentmanager helps us (the responsible party according to GDPR) to fulfil our legal obligations (e.g. obligation to provide proof). Our legitimate interests in the data processing are to save the user’s settings and preferences regarding the use of cookies and other functions. consentmanager stores your data for as long as your user settings are active. Two years after establishing your user settings, your consent is obtained again. The user settings are then stored for another two years.
You can object to the processing of your data. You have the right to object for reasons based on your particular situation. To submit your objection, please write an e-mail to info@consentmanager.net.
8. Data security
We have technical and organizational security procedures in place to protect the security of your personal data and to protect your personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access.
9. Your rights
Compliance with data protection regulations is monitored by the following bodies, to which anyone can turn:
Data protection officer of REHAU Industries SE & Co.KG (Head office within the meaning of Art. 4 Nr. 16 GDPR):
REHAU Industries SE & Co. KG
Rheniumhaus
Helmut-Wagner-Str. 1
95111 Rehau
Germany
Phone: +499283770
E-mail: datenschutz@rehau.com
Lead supervisory authority within the meaning of Art. 56 GDPR:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Fax: 01625 524510
You also have the possibility to check REHAU's compliance with data protection regulations yourself. You are entitled to the following rights:
- Information Law
- Right to access your processed data
- Right to object
For all processing operations based on Art. 6 I f GDPR (see above), you can object the processing on grounds relating to your particular situation. - Right to object to direct marketing
You are entitled to object at any time to the processing of your data for the purpose of direct marketing. This also applies to profiling in connection with such direct marketing. - Right of correction, deletion and limitation
- Right of data portability
- Right to lodge a complaint with a supervisory authority
If you have any questions about these rights regarding the processing of your personal data, you can contact our data protection officer, who is also available in the event of requests for information, suggestions or complaints. Upon request, REHAU will inform you as soon as possible in writing if and which of your personal data we have stored in accordance with applicable law. Should incorrect information be stored despite our efforts to ensure that the data is correct and up-to-date, we will correct it at your request.