IV. Cookies

As part of our legitimate interest under Article 6(1) point (f) GDPR in having a technically sound website and optimising it over time, our website uses cookies so that it can be used more easily, more efficiently and more securely.

Cookies are small text files that are stored on your computer. They may be 'session cookies' that are automatically deleted at the end of your visit to our website, or cookies that are stored permanently on your computer unless you delete them yourself. These enable us to recognise your browser the next time you access our website and to provide correspondingly suitable offerings. You can block cookies altogether or for particular websites in your browser settings. If you do so, however, the full functionality of our website might no longer be available to you.

We use cookies to make it easier for users to use our website. Cookies are therefore used for basic Typo3 functionality, Google Analytics and ShareThis, and to populate the wish list.

V.  Contact form and e-mail contact

If you send enquiries to us using the contact form, your details will be used only for handling your enquiry. This data is not shared with third parties.

The following data from the catalogue order form input screen is stored:

• Surname
• First name
• Company
• Sector
• Address line 1
• Postcode
• Town/City
• E-mail
• Message

The following data from the contact form input screen is stored:

• Surname
• First name
• Company
• Address line 1
• Postcode
• Town/City
• E-mail
• Message

Our system also stores the following data at the time of submission:

• User's IP address
• Date and time of contact

Alternatively, you can contact us using the e-mail address provided. In this case, the user's personal data transmitted with the e-mail is stored.

Data entered in the contact form is processed on the basis of your consent (Article 6(1) point (a) GDPR), which you give by filling in the input screen. You can withdraw this consent at any time. To do so, it is sufficient to notify us by e-mail. There are no formal requirements in this regard. Withdrawing your consent has no impact on the lawfulness of data processing operations conducted until the point of withdrawal.

We retain the data you have entered in the contact form until you ask us to erase it, withdraw your consent to it being stored or the purpose for storing the data no longer applies (e.g., once your enquiry has been dealt with). Mandatory statutory provisions - in particular periods of retention - remain unaffected.

VI. Analysis tools and advertising

1. Google Analytics
   
   This website uses features of the Google Analytics web analysis tool.
   
   
2. If your habitual residence is in the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland. If your habitual residence is not in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
   
   
3. You can find Google’s Privacy Policy at https://policies.google.com/privacy?hl=en-UK 
   
   
4. If personal data is transferred to the US, Google is subjected to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can find an up-to-date certificate under this link: https://www.privacyshield.gov/list.
   
   Google Analytics uses 'cookies'. Cookies are text files stored on your computer that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is generally transferred to a Google server in the US and stored there.
   
   Google Analytics cookies are stored on the basis of Article 6(1) point (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise its site and its advertising.
   
   We have activated IP anonymisation on this website. This means that your IP address is truncated by Google within the Member States of the European Union or in states that are party to the Agreement on the European Economic Area before being transmitted to the US. Only in exceptional cases is the full IP address transferred to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about online activities and to provide other services associated with website use and Internet use to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not combined with any other Google data.
   
   You can block cookies by configuring your browser software settings accordingly. We would point out, however, that if you do so, you might not be able to use all the features of this website in full. You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected and processed by Google, by downloading and installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
   
   You can also prevent Google Analytics from collecting your data by setting an opt-out cookie that blocks collection of your data when you visit this website in the future.
   
   More information on how Google Analytics handles user data is available in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
   
   We have concluded a contract on commissioned processing with Google and fully apply the strict requirements of the German data privacy authorities to the use of Google Analytics.
   
   This website uses Google Analytics' demographic features. This allows reports to be created containing statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be attributed to any specific individual. You can disable this feature at any time by adjusting the ads settings in your Google account, or you can block Google Analytics from collecting your data as described in the section about opting out of data collection.

1. 2. Google Tag Manager
   Google Tag Manager does not analyse any data itself and does not collect any personal data. It is an addition to Google Analytics, which can share information about user interactions with Google Analytics and, at the same time reduces the need for administrative maintenance on the pages.

VII. Social media

1. ShareThis plug-in
   
   We use social plug-ins for the bookmarking tool provided by ShareThis, Inc. ('ShareThis'), 250 Cambridge Avenue, Palo Alto, CA 94306, USA. These plug-ins allow users to set bookmarks and to post or share bookmarked content in social networks (e.g., Twitter, Facebook or Google+).
   
   If a user is signed in (e.g., to Twitter, Facebook or Google+) when using one of these ShareThis features, the visit to our website can be allocated to their respective social media account. ShareThis itself obtains no personal data of the user. It does, however, compile anonymised usage statistics about the shared content. This data is erased by ShareThis at regular intervals. More information about the collection, analysis and processing of your data by ShareThis, Inc. and your rights in this respect is available in the ShareThis Privacy Policy at sharethis.com/privacy-manifesto.
   
   If you do not want your visit to our website to be allocated to your social media accounts or social bookmarking tools, we recommend that you do not use the ShareThis fields on our website.

VIII Plug-ins and tools

1. YouTube
   
   We use plug-ins from the Google-operated site YouTube.
   
   
2. If your habitual residence is in the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Republic of Ireland. If your habitual residence is not in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
   
   
3. You can find Google’s Privacy Policy at https://policies.google.com/privacy?hl=en-UK
   
   
4. If personal data is transferred to the US, Google is subjected to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can find an up-to-date certificate under this link: https://www.privacyshield.gov/list.
   
   When you visit one of our pages that features a YouTube plug-in, a connection with the YouTube servers is established. In this respect, the YouTube server is notified which of our pages you have visited.
   
   If you are signed in to your YouTube account, you are enabling YouTube to allocate your online activities directly to your personal profile. You can prevent this by signing out of your YouTube account.
   
   YouTube is used for the purposes of presenting our online offerings in an attractive way. This constitutes a legitimate interest within the meaning of Article 6(1) point (f) GDPR.
   
   More information on how YouTube handles user data is available in the YouTube Privacy Policy: policies.google.com/privacy.

IX. Your rights as a data subject

Insofar as we process your personal data, you are a data subject within the meaning of the GDPR. In this capacity, you enjoy the following rights:

1. Right of access (Article 15 GDPR)
   You can obtain from us at any time and free of charge information about the personal data we have stored about you. To prevent abuse in this respect, you will have to prove your identity.
   
   
2. Right to rectification (Article 16 GDPR)
   Where your personal data that is processed by us is incorrect or incomplete, you have the right to have this rectified and/or completed at any time.
   
   
3. Right to erasure - Right to be forgotten (Article 17 GDPR)
   You have the right to have your personal data that is processed by us erased. This applies, in particular, if the purpose for processing no longer applies, required consent has been withdrawn and there is no other legal basis or our data processing is unlawful. We will then erase your personal data without delay within the framework of the law.
   
   
4. Right to restriction of processing (Article 18 GDPR)
   You can obtain restriction of processing for your data.
   
   Where processing of personal data relating to you has been restricted, this data will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
   
   Where the restriction of processing is limited because of the above provisions, you will be informed by the controller before the restriction of processing is lifted.
   
   
5. Right to notification (Article 19 GDPR)
   If you have exercised your right to rectification, erasure or restriction of processing with respect to the controller, the controller is required to communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data relating to you has been disclosed, unless this proves impossible or involves disproportionate effort.
   
   You have the right to be informed by the controller about these recipients.
   
   
6. Right to data portability (Article 20 GDPR)
   You can obtain from us the transfer of data stored about you in machine-readable format.
   
   
7. Right to object (Article 21 GDPR)
   You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data relating to you, which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on these provisions.
   
   The controller will no longer process the personal data relating to you, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
   
   Where personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data relating to you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
   
   Where you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for such purposes.
   
   
8. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
   Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is:
   
   Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg Commissioner for Data Privacy and Freedom of Information)
   Königstrasse 10a
   70173 Stuttgart, Germany
   Tel.: +49 711/61 55 41 - 0
   E-mail: poststellenoSpamPlease@lfdi.bwl.de
   
   The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
   
   
9. Information about dispute resolution for consumers under Section 36 of the German Act on Alternative Dispute Resolution in Consumer Matters (VSBG):
   We will always endeavour to come to an amicable arrangement with you. If, in exceptional circumstances, we are unable to resolve your concerns satisfactorily, recourse through the courts is, of course, possible. We are not prepared and we are under no obligation to participate in a dispute resolution procedure under the VSBG before a consumer conciliation body. A platform for out-of-court dispute resolution online (ODR platform) is provided by the European Commission and is available at www.ec.europa.eu/consumers/odr. You can find our e-mail address in our Legal Notice.

X. Amendments to our Privacy Policy

If an amendment to our Privacy Policy is required for reasons of law or fact, we will update this page. This will have no effect on consents given by the user.

XI. Online application process:

Privacy Policy for online applications globally

Our company places considerable importance on the protection of personal data relating to applicants, employees, contractual partners and all third parties otherwise associated with us.

We process personal data collected during visits to our web pages in accordance with the laws on data protection and data security in the Federal Republic of Germany. Where personal data is transmitted to Group companies outside Germany, the data privacy provisions of the country is question also apply. The electronic data processing system for implementing recruitment processes is used within the company/company Group globally. For this reason, personal data may be transmitted across national borders to countries inside and outside the European Union where the companies of the RIDI Group are based and viewed there.

This Privacy Policy provides information about how our company handles information collected during your visit to our careers pages. We would like to inform you, in accordance with the applicable data privacy provisions, about how your data is collected, processed and used as part of the online application process.

Please read the information and provisions below carefully before you transmit your data to us.

Purpose of data collection

If you would like to apply to us online, i.e., through www.ridi-group.com or by e-mail, we need some details about you. We promise that your details will be treated as confidential. The data that you enter is processed, forwarded as necessary and used only for the purposes of candidate selection.

Which data is collected in our online application tool?

During the online application process, we collect the information that is necessary for the application process at RIDI Leuchten GmbH. The following application data is therefore collected and processed:

• First name
• Surname
• Telephone number/mobile number
• E-mail
• Address
• Preferred starting date
• Salary expectations
• Dropdown: How did you become aware of the position?
• Attachments (uploaded covering letters, CVs, certificates)
• For security reasons, we will send you a confirmation e-mail after you have applied for a position with us online.

For security reasons, we will send you a confirmation e-mail after you have applied for a position with us online.

By submitting your application, you give your consent to be contacted and notified in writing and/or by telephone as part of the application process.

Please note that your data will be available to the HR Management department at RIDI Leuchten GmbH and the units in the Group, inside and outside Germany, which are relevant to the position being filled.

Application information

We look for the best candidates, regardless of race, ethnic origin, gender, religion or world view, disability, age or sexual identity. We do not require any information from you that is unusable under the German General Equal Treatment Act or any other national or international equal treatment legislation.

Furthermore, please do not share with us any confidential internal matters or commercial secrets of your former or current employer.

Who do we share your personal data with?

The information you provide to us is treated as confidential and is only shared inside our company with people who are involved in a specific application process. In this respect, the relevant company employees may be located in Germany, in another EU country or elsewhere.

Editing and erasing your application

You can have your application amended or erased at any time and ask us to assist you in this by contacting our HR Management team at RIDI Leuchten GmbH using the e-mail address bewerbungen@ridi-group.com. Personal data will then be erased in accordance with the application statutory provisions.

This does not apply where statutory provisions prevent erasure or where further storage is required for evidential purposes.

Personal data is erased after the conclusion of the application process or no later than 24 months after conclusion of the application process. If a contract is entered into following your application, your data can be stored and used for the purposes of the normal organisation and administration process, observing the applicable legal provisions. Of course, you have the right to withdraw your application at any time or to obtain the erasure of your personal data.

Security

The security of your data is very important to us. For this reason, we have introduced physical, electronic and administrative processes in order to protect the information we collect. Individuals have access to your personal data only if they need such access to carry out their work duties.

Cookies

The online application system stores a temporary file on your computer for the purposes of archiving information (a 'cookie'). Cookies are used to make it easier for you to navigate and work with the online application system. This is achieved, for example, by allocating an identification number, known as a session ID, which enables the server to attribute successive browser requests to the same user. In this respect, our company uses only temporary cookies, in other words cookies that are stored on your computer only for a limited time.

Consent

By submitting your application, you confirm that you have read the information in this Privacy Policy about the processing and use of your personal data and that you give your consent for such processing and use. If you are still a minor, you confirm that you have obtained the permission of a parent or guardian to apply to us. You also confirm that your details are correct.

If you are under the age of 16, please include the written consent of your parent or guardian with your application. Please note that if you do not do so, we will be unable to consider your application and we will erase your data in keeping with statutory requirements. For the purposes of providing such consent, you can use a form of your choice or you can print out this document and have it signed.

I hereby consent to (COMPANY) collecting and processing personal data from

__________________________ (name of applicant)

.

_____________________________ (signature of parent or guardian)

_____________________________ (point of contact/data protection officer)

If you have any questions about data privacy or wish to exercise your right of access or right to object, please contact our data protection officer at Columbus Consulting using the e-mail address datenschutznoSpamPlease@ridi.de.

Amendments to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time in response to technical and legal requirements. We also refer you to our general data privacy provisions for our Web pages.