Privacy Statement for Routhier Weber Handelsgesellschaft mbH & Alwelis Weber Handelsgesellschaft mbH
§ 1 Information concerning the collection of personal data
(1) General information
We appreciate your interest in our website. The protection of your personal data in conjunction with your visit to our website has a particularly high priority for the executive board of Routhier Weber Handelsgesellschaft mbH and Alwelis Weber Handelsgesellschaft mbH. With the information below we provide an overview of the processing of your personal data on our part and of your rights deriving from the protection of data. Personal data are all data that relate to you personally, e.g. Name, address, email addresses, user behaviour.
If an affected person (data subject) wants to make use of particular services of our company via our website, a processing of personal data could be required. If the processing of personal data is required and if the legal basis for such processing does not exist, then we always obtain the consent of the data subject. In this regard the processing always occurs in accordance with the EU General Data Protection Regulation (GDPR) and in conformity with the country-specific data protection regulations that apply for Routhier Weber Handelsgesellschaft mbH, as well as Alwelis Weber Handelsgesellschaft mbH.
As the party responsible for the processing (data controller), we have implemented technical and organizational measures to ensure protection, which is as seamless as possible, of the personal data that is processed via this website, against loss, destruction, modification or dissemination of your data on the part of unauthorised persons. This also includes the fact that in our companies your personal data is securely transmitted through encryption. In this regard we use the TSL (Transport Layer Security) coding system.
Nevertheless, due to fundamental security gaps of Internet-based data transmissions, absolute protection cannot be ensured.
(2) Joint controllers for the data processing
The controllers in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations, are:
Routhier Weber Handelsgesellschaft mbH & Alwelis Weber Handelsgesellschaft mbH
Finkenweg 2 | 63674 Altenstadt, Germany
Tel.: +49 6047-98 11 0 | Fax: +49 6047-98 11 60
(2a) Why the joint responsibility?
In operating the website, Routhier Weber Handelsgesellschaft mbH & Alwelis Weber Handelsgesellschaft mbH (hereinafter companies) work quite closely together. This circumstance also affects the processing of your personal data. Consequently the companies are jointly responsible for the protection of your personal data (Article 26 GDPR).
(2b) What have the parties agreed?
In operating the website, personal data is generated for which a joint responsibility exists. Within the scope of our joint data protection responsibility the companies have agreed on which of the companies will fulfill what obligations in accordance with the GDPR. In particular this affects the protection of the rights of the data subjects and the fulfillment of the information obligations stipulated in Articles 13 and 14 GDPR. This agreement is necessary, since in operating the website, personal data will be processed in different systems that are either operated by Routhier Weber Handelsgesellschaft mbH or Alwelis Weber Handelsgesellschaft mbH.
Fulfillment of the obligations by
Routhier Weber Handelsgesellschaft mbH
Email contact address
Routhier Weber Handelsgesellschaft mbH
Routhier Weber Handelsgesellschaft mbH
(2c) What does this mean for the data subject?
Even if a joint responsibility exists, the parties fulfill the data protection obligations in accordance with their individual responsibilities, as follows:
- The companies make the information required in accordance with Articles 13 and 14 GDPR available to the data subjects, free of charge, in a precise, transparent, understandable and easily accessible form, in a clear and simple language. In so doing, each company provides the other company all information necessary in this regard from its respective area of operation.
- The companies immediately inform each other of the legal positions asserted by data subjects. The companies make all information available to each other that is required in order to respond to requests for information.
- Data protection rights (privacy rights) can be asserted against Routhier Weber Handelsgesellschaft mbH, as well as against Alwelis Weber Handelsgesellschaft mbH 2. Data subjects always obtain information from the entity, against which rights have been asserted.
(2d) Data protection officer
Please send general questions concerning the data privacy of the two companies to
The companies have appointed a joint data protection officer. Your can reach the companies' joint data protection officer through regular mail at one of the addresses cited above, with the addition - Data Protection Officer -, or via email at Datenschutzbeauftragter(at)routhier.de.
(3) General information concerning data processing
We only collect and use personal data of our users, if this is necessary for provision of a functional website, as well as for presentation of our content and provision of services. Collection and use of personal data of our users regularly occurs only after the user has given his/her consent. An exception applies in those cases, in which a prior obtaining of consent is not possible for practical reasons and the processing of the data is permitted through statutory regulations.
In this regard the following legal grounds are established for the processing of your personal data:
- Processing due to your consent (Article 6(1)(a) GDPR)
- Processing for fulfillment of a contract, to which the data subject is party. This also applies to processing procedures that are required for execution of pre-contractual measures (Article 6(1)(c) GDPR)
- Processing for fulfillment of a legal obligation, to which our enterprise is subject (Article 6(1)(c) GDPR)
- Processing in the event that vital interests of the data subject or of a different natural person render a processing of personal data necessary (Article 6(1)(d) GDPR)
- Processing to protect a legitimate interest of our company or of a third party, if the interests, civil rights and fundamental freedoms of the data subject do not override the interest first cited (Article 6(1)(f) GDPR). In particular legitimate interests can be:
- to correctly deliver the content of our website;
- statistical analyses for examining and optimising the website;
- to provide information necessary for criminal prosecution to law enforcement authorities in the event of a cyber attack;
- to respond to inquiries, and to provide services and/or information that are intended for you;
- to process and transmit personal data for internal or administrative purposes;
- to avoid and detect cases of fraud and crime;
- Assuring the ongoing operational capacity of our technical information systems and the technology of our website with the objective of increasing the data protection and data security in our enterprise.
§ 2 Your rights
(1) My rights as data subject
At the address cited above you can demand information about the data concerning yourself that is stored (Article 15 GDPR). Moreover, you can demand a correction, if we have stored incorrect data concerning yourself. (Article 16 GDPR). In addition, under certain conditions you can demand the erasure of your data (Article 17 GDPR) or assert the right to object (Article 21 GDPR). Likewise you are entitled to the right to restrict processing of your personal data (Article 18 GDPR), as well as a right to portability of the data you have provided (Article 20 GDPR). For the right to information and for the right to erasure, the restrictions stipulated in §§ 34 and 35 of the Federal Data Protection Act (BDSG) apply.
If in your view the processing of your personal data is in conflict with the prescriptions of the General Data Protection Regulation, you have the right to an effective judicial remedy against your responsible data protection supervisory authority (Article 77 GDPR, in conjunction with § 19 BDSG). For the German Federal State of Hesse, this is the State Representative for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.
If the processing of data occurs on the basis of your consent, in accordance with Article 7 GDPR you are entitled to withdraw your consent to use your personal data at any time. Please note that the withdrawal only has effect for the future. Processing that has occurred prior to the consent is not affected by the withdrawal. In addition, please note that we must store certain data for a specific period of time for fulfillment of statutory regulations.
(2) Information concerning your right of withdrawal in accordance with Article 21 GDPR
1. RIGHT TO WITHDRAWAL ON A CASE-BY-CASE BASIS
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data in accordance with Article 6(1)(e) GDPR (processing of data in the public interest) and Article 6(1)(f) GDPR (processing of data on the basis of a balancing of interests); this also applies to profiling based on this provision as defined in Article 4(4) GDPR.
If you object, we will no longer process your personal data, unless we can prove compelling legitimate grounds that override your interests, rights and freedoms, or if the processing is used for establishment, exercise or defence of legal claims.
2. RIGHT TO OBJECT TO PROCESSING OF DATA FOR PURPOSES OF DIRECT ADVERTISING
In individual cases we process your personal data for purposes of direct advertising. You have the right, at any time to object to the processing of personal data concerning yourself for the purposes of this type of advertising. If you object to the processing for purposes of direct advertising, then we will no longer process your personal data for these purposes. The objection can be submitted without a formal requirement and if possible should be sent to the contact data specified in number 2.
(3) Who gets my data?
Unless otherwise regulated in the detailed descriptions of the quotations, within our companies those de-partments obtain access to your data, that need your data for fulfillment of our contractual and legal obligations, or that need your data for realisation of our legitimate interests. We will only pass on information concerning yourself, outside of the companies, if statutory or government agency reporting obligations allow or require such passing on, such passing on is required for the transacting and thus fulfillment of the contract, or on your request, for execution of pre-contractual measures, we have obtained your consent, or if we are authorised to provide information.
If we rely on commissioned service providers for individual functions of our offering, then these service providers have been carefully selected and commissioned, are bound by our instructions and are regularly monitored. In this case your personal data will be processed on the basis of processing of personal data under contracts in accordance with Article 28 GDPR and we ensure that the processing of personal data occurs in accordance with the provisions of the GDPR. In this case the categories of recipients are provid-ers for the website management.
If we want to use your data for advertising purposes, we will inform you in detail of the respective procedures, as specified below.
(4) How long will my data be stored?
If this is not otherwise regulated in the detailed descriptions of the quotations, we will process and save your personal data for as long as is necessary for fulfillment of our contractual and legal obligations.
Your personal data will be regularly deleted or blocked, if it is no longer required for fulfillment of contractual or legal obligations, you have exercised your right to deletion, all mutual claims are fulfilled, and no other legal retention obligations or legal justifications for the storage exist.
§ 3 Collection of personal data when you visit our website
(1) Use of server log file
With every access of the website on the part of a data subject, or an automated system, a number of gen-eral data and information items are recorded in log files. This information includes an Internet protocol address (IP address), the browser types and versions used, the website from which an accessing system accesses our website (so-called referrers), the sub-websites that are accessed via an accessing system on our website, the date and time of access to the website and other similar data and information that is useful in averting danger in the event of attacks on our information technology systems.
The legal grounds for the temporary storage of the data and log files are based on Article 6(1)(f) GDPR with the legitimate interests cited above.
A temporary storage of the IP address through the system is necessary to ensure the delivery of the website to the computer of the user. For this the IP address of the user must remain stored for the duration of the session.
Storage in log files occurs to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our IT systems. Here as well, our legitimate interest is based on data processing in accordance with Article 6(1)(f) GDPR. The data will be deleted as soon as the data is no longer required for the purpose for which it was collected. In the case of data collection for provision of the website, this is the case when the respective session is ended. Data collection for provision of the website and storage of the data in log files is required for operation of the website. An additional possibility for reviewing the log files exists, if there is a justified suspicion of unlawful use or a concrete attack on our website based on specific indications. In this case our legitimate interest is in purposes of investigation and prosecution of such attacks and unlawful uses.
In addition to the data previously cited, when you use our website cookies are stored on your computer. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the entity that sets the cookie (in this case we set the cookie). Cookies cannot execute any programs or transmit viruses to your computer. They are used to make the overall Internet offering more user friendly and more effective.
This website uses the following types of cookies; the scope and mode of operation of the various types of cookies are explained below.
Transient cookies: These cookies are deleted automatically, when you close the browser. These particularly include the session cookies. These cookies store a so-called session ID, with which different requests of your browser can be assigned to the common session. Through this assignment your computer can be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies: These cookies are deleted after a prescribed period of time via an automated mechanism that can vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
(3) Google Web Fonts
This website uses so-called web fonts that are offered by various providers for uniform presentation of fonts. When accessing a website your browser loads the required web fonts into your browser cache, in order to display texts correctly.
For this purpose, the browser you use must accept access to the servers of the providers. Through this measure the provider obtains knowledge that our website has been accessed via your browser. Web fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest, as defined in Article 6(1)(f) GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
§ 4 Additional functions and offerings of our website
In addition to the purely informational use of our website, we also offer different services that you can use if they are of interest to you. As a rule, to use these services you must enter additional personal data, which we then use for provision of the respective service and the previously cited principles apply to this data processing.
(1) Use of contact possibilities
On our website it is possible to enter into contact with us via the provided email address; in this case the personal data of the user that is transmitted with the email is stored. The data is used exclusively for the subsequent conversation with you and is not passed on to third parties. Article 6(1)(f) GDPR establishes a legitimate interest for the processing of data transmitted in the course of sending an email.
If the purpose for contacting us is aimed at entering into a contract, then with execution of pre-contractual measures, and possibly the subsequent processing for fulfillment of a contract, then in addition the legal basis for the processing in accordance with Article 6(1)(b) GDPR must also be included.
The personal data that we process as part of a general contact inquiry via the contact form or via email, we store only until the respective correspondence is ended. The conversation is ended, when the circumstances indicate that the matter in question has been definitively clarified.
A consent to the processing of your personal data can be withdrawn at any time. If contact is made with us via email you can also object to the storage of your personal data at any time. In such a case (see also § 2 no. 2) the conversation cannot be continued.
§ 5 Web analysis
(1) Use of Google Analytics
This website uses Google Analytics, a website analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website will, as a rule, be transmitted to a Google server in the US and stored there. However, if IP anonymisation is enabled on this website, Google will shorten your IP address beforehand within member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and Internet use to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be linked with other Google data.
You can prevent the storage of cookies through an appropriate setting of your browser software, however we expressly state that in this case it may not be possible to use all functions of this website to their full extent. Moreover, you can prevent collection of data generated by the cookie and that is based on your use of the website (including your IP address) and transmission of this data to Google, as well as the processing of this data on the part of Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Opt-out cookies prevent the future collection of your data when visiting this website. To prevent collection on the part of Universal Analytics over different devices, you must execute the opt-out procedure on all systems used. If you click here the opt-out cookie will be set:
Deactivate Google Analytics
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in a shortened form, thus excluding the possibility of IP addresses being directly linked to a particular individual. If the data concerning yourself that is collected is referenced to a person, this reference will be excluded immediately and the personal data will be deleted immediately.
We use Google Analytics to analyse the use of our website and to regularly improve the use of our website. Via the statistics obtained we can improve our offering and make it more interesting for you as a user. For the exceptional cases, in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR.
In addition, this website uses Google Analytics for cross-device analysis of visitor flows; this analysis is executed via a user ID. In your customer account, under "My Data", "Personal Data, you can deactivate the analysis of your use.
§ 6 Use of social media
(1) Integration of Google Maps
On our website we use the Google Maps offering in the form of a link. This means you can display an interactive map, thus we enable your use of the convenient map function.
Through the visit to our website, Google obtains the information that you have accessed the respective sub-page of our website. In addition, the data cited under the point "Use of server log files" of this statement, is also transmitted. This occurs regardless of whether Google provides a user account, through which you are logged on, or even if a user account does not exist. If you are logged into Google your data will be allocated directly to your account. If you do not desire the allocation with your profile at Google, you must log out before activating the button. Google stores your data as use profile and uses it for advertising, market research and/or design of its website in line with market requirements. Such an analysis occurs, particularly (even for users that are not logged on) for provision of demand-driven advertising and to inform other users of the social network about your activities on our website. You have right to object to the formation of this user profile, but you must contact Google to exercise your right.
Additional information for the purpose and scope of data collection and processing on the part of the plug-in provider is cited in the privacy policies of the provider. There you will also obtain additional information concerning your rights in this regard and the possibilities offered by the settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.