Privacy Policy

Status: January 2024

We are very pleased about your interest in our company. Data protection is of a particularly high priority for the management of Rutronik Elektronische Bauelemente GmbH (hereinafter referred to as Rutronik GmbH). For this reason, Rutronik GmbH has implemented extensive technical and organizational measures to ensure the most complete protection of your personal data processed by us. In particular, the certified information security management system (ISMS) according to ISO27001:2016 should be mentioned here. Our security procedures are regularly reviewed and adapted to technological progress.
Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Rutronik GmbH. By means of this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, data subjects are informed of the rights to which they are entitled by means of this data protection declaration.

Please note that the contents of this privacy policy are only valid in the version with the above-mentioned status at the time of your visit. Due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy. This is also the case if we add functions or use additional providers. The new data protection declaration will then apply to your next visit to our website.

1. Controller

The controller of the data processing on this website is:

Rutronik Elektronische Bauelemente GmbH

Industriestraße 2, Germany 75228 Ispringen
Phone: +49 (0) 72 31 / 801 0
Fax: +49 (0) 72 31 / 822 82
Email: rutronik@rutronik.com

2. General information

How do we collect your data?
On our website, there are various ways in which we collect data from you. On the one hand, this is done by you providing it to us when contacting us via our contact form. Other data is collected automatically or after your consent in our Consent Manager (available in the footer) when you visit our website through our analysis tools. This is mainly technical data (e.g. internet browser, operating system or time of page view).

What do we use your data for?
We collect some of your data to ensure the error-free provision of our website. With the help of other data, we analyze your user behavior in order to offer you special services, for example.

Storage period
If we do not specify a specific storage period within the data protection declaration, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, we will delete your data unless we have other legally permissible reasons for storing your personal data. Such a reason would be, for example, retention periods under tax or commercial law. Should such a reason exist, the deletion will take place after the reason has ceased to exist.

Contact options
If you have any questions or wish to exercise any of your data protection rights, please feel free to contact us at any time by e-mail at: dsb@rutronik.com

3. External hosting of our website

The website is not hosted by Rutronik GmbH itself, but by an external service provider. For the hosting of our website, we use the services of Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn (hereinafter Telekom).

The external hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. (6) 1 f) GDPR). Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) a) GDPR and Section 25 (1) new German Telecommunications-Telemedia Data Protection Act (TTDPA), insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDPA. The consent can be revoked at any time.

Our hoster will or will process your data only insofar as this is necessary for the fulfillment of its service obligations and follow our instructions with regard to this data.

Telekom processes our customer data in accordance with our instructions and has committed itself to handling your personal data in a trustworthy and GDPR-compliant manner. We ensure this through a so-called data processing agreement (hereinafter DPA) with Telekom.

You can find more information about Telekom's data processing in german language at: https://www.telekom.de/ueber-das-unternehmen/datenschutz#fragen-und-antworten

4. Processing purposes

Personal data such as name, address or e-mail address are only collected by us in the context of providing a service, e.g. when using the contact form, placing an order via our web shop or registering for our newsletter. Information voluntarily provided by you in this regard will be used exclusively for the purpose for which you have provided it to us. The processing of personal data is carried out exclusively in accordance with the principles of Art. 5 GDPR.

4.1 Processing of usage data when accessing our homepage

Even in the case of purely informational use, a series of general data and information is transmitted with each call to our website. We only log the general data and information that your browser transmits to our server. Data and information is collected that is technically necessary for us to display our website to you and that serves the stability, security and danger prevention in the event of attacks on our information technology systems.

•   IP address
•   date and time of website access
•   type and version of browser used
•   operating system used and its interface
•   the website from which an accessing system arrives at our website (so-called referrer)
•   sub-websites that are accessed via an accessing system on our website,
•   Internet service provider of the accessing system.

We delete the data accruing in this context after storage is no longer required for error analysis, or restrict processing if there are statutory retention obligations. The legal basis for data processing in this context is Art. 6 (1) f) GDPR. When using this general data and information, we do not draw any conclusions about you as a data subject. The logged data is stored for a period of 100 days. Afterwards, they are deleted by the system.

4.2 Error-Logs

For the purpose of error identification and correction, so-called error logs are created. This is absolutely necessary in order to be able to react to possible problems in the presentation and implementation of content as promptly as possible (legitimate interest). These data are usually pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. The legal basis for this is found in § 15 para. 1 German Telemedia Act (TMG) as well as Art. 6 (1) f) GDPR. When an error message occurs, general data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp when the corresponding error message/specification occurred are recorded. The storage period of these error logs is up to 100 days. There is no right of objection.

4.3 Use of the contact form or contact by e-mail

If you have any questions, for example about our products, you can use the contact form provided on our website or you are also welcome to contact us by e-mail. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) a) GDPR on the basis of your voluntarily given consent or, in the case of a (pre-) contractual relationship with us, in accordance with Art. 6 (1) b) GDPR. We delete the data accruing in this context after the storage is no longer necessary for the processing of your request, or restrict the processing if there are legal retention obligations.

4.4 Use of the web shop

If you would like to place an order in our web shop, it is necessary to create a customer account, through which we can partially store personal data for later further purchases. Likewise, it is necessary for the conclusion of a contract that you partially provide personal data that we need for the processing of your order.

Necessary mandatory information is marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank or, in the case of credit card payment, to an external payment provider. The legal basis for this is Art. 6 (1) b) GDPR. For the information you provide voluntarily, the legal basis is your consent pursuant to Art. 6 (1) a) GDPR.

We are required by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after six months without a customer account login, i.e. your data is only used to comply with legal obligations.

To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.

4.5 Newsletter registration

We offer you the possibility to register for our newsletter, with which we inform you about our current interesting offers as well as technologies and news from the world of electronic components.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove and clarify your registration and, if necessary, a possible misuse of your personal data.

Mandatory information for sending the newsletter is only your e-mail address. The provision of further, separately marked data is voluntary and will only be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) a) GDPR.

You can revoke your consent to the processing of your personal data and its use for sending the newsletter at any time with effect for the future. To do so, you can either use the unsubscribe link located in the newsletter or contact the contact specified in the privacy policy. The revocation of your consent by unsubscribing from the emails has no effect on the lawfulness of the data processing until the time of revocation. If you unsubscribe from the e-mails, the data stored by us for the purpose of sending these e-mails will be deleted, unless the deletion contradicts legal retention obligations.

For sending the newsletter, we use the email marketing software of Inxmail GmbH, Wentzingerstr. 17, Germany 79106 Freiburg (hereinafter referred to as Inxmail). Inxmail processes our customer data in accordance with instructions, on our behalf and has committed itself to handling your data in a trustworthy manner. For further information on data processing by Inxmail, please visit: https://www.inxmail.de/.

4.6 Newsletter-Tracking

In addition to sending the newsletter, Inxmail provides us with statistical evaluations regarding the opening of the newsletter sent and the clicks on articles contained here. In doing so, recipient reactions (opening of a mailing, clicking on text and image links, downloading images with an email program) are recorded and stored anonymously for statistical purposes (so-called "newsletter tracking").

It is not possible to draw conclusions about individual recipients from the stored data. We use this information exclusively to improve the quality of the newsletter content. The information is only stored as long as you have subscribed to the newsletter. The legal basis for newsletter tracking is Art. 6 (1) a) GDPR and requires your prior express consent. For this purpose, we will ask you separately by email after you have subscribed to the newsletter whether you agree to the newsletter tracking.

You can object to tracking at any time with effect for the future by changing the tracking settings (so-called "tracking permission") for your newsletter profile via the separate "Update your Profile" link provided in the footnote of each newsletter email.

You can also obtain further information from Inxmail at: https://www.inxmail.de/.

4.7 Online event registration

On our website we offer you the possibility to register for our events. For this purpose, we require personal data from you for the registration and implementation of the event. We process your personal data only insofar as this is necessary for the implementation of the respective event on the basis of Art. 6 (1) b) GDPR.

In individual cases, personal data of special categories may be requested and processed in accordance with Art. 9 GDPR (e.g. food intolerances in the case of a catering offer). We will then obtain your express consent for this when you register. The processing is then based on Art. 9 (2) a) GDPR.

Your data will only be passed on to the person in charge of the event (and, if applicable, your team) insofar as this is necessary for the implementation of the respective event. Your data will be deleted after the event has been completed, unless there are legal retention periods.

For the online event registration, we use the service of the company Lyyti Oy,
Linnankatu 13 Aa 18, 20100 Turku, Finland (hereinafter Lyyti). Lyyti processes our customer data in accordance with our instructions, on our behalf and has committed itself to handling your data in a trustworthy manner. For more information about Lyyti and how we process your data, please visit: https://www.lyyti.com/en and: www.lyyti.com/data-protection.

4.8 Application management

We collect and process the personal data of applicants for the purpose of managing the application process. More detailed information on data processing during the application process can be found on our careers page: https://www.rutronik-careers.com/.

4.9 Cookies

The internet pages of Rutronik GmbH use cookies. Cookies are text files that are stored on a computer system via an Internet browser.

Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, because this is handled by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in our online store. Rutronik24 remembers the item that a customer has placed in the virtual shopping cart via a cookie.
We create usage profiles under a pseudonym with the help of tracking services and cookies. Such a usage profile contains information about a visitor's behavior on websites. It is not possible to draw any direct conclusions about the user.

The setting of cookies by our website can be prevented at any time by means of a corresponding setting of the Internet browser used and thus the setting of cookies can be permanently objected to. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

You can delete all cookies stored on your computer and set most browsers to prevent cookies from being stored. You can find out how, for example, here: AllAboutCookies.org.

In general, web browsers are currently set by default to automatically accept cookies. On these pages you can learn how to change this default setting and block cookies - also from this website:

•   Chrome
•   Firefox
•   Internet Explorer
•   Opera
•   Safari

Our website uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

• Essential cookies are necessary to ensure the core functionality of the website.
• Statistical cookies are cookies that are used to record user behavior on our website so that the functionality of the website can be improved.

The legal basis for the use of essential cookies is Art. 6 (1) f) GDPR - a legitimate interest. Our legitimate interest in the use of essential cookies is to be able to provide a functioning website. The legal basis for statistical cookies is Art. 6 para. 1 a) GDPR - your consent. No non-essential cookies will be set without your consent.

You can change or revoke your consent to cookie use at any time in our Cookie Consent Manager (available in the footer) on our website with effect for the future.

5. Integration of third-party tools

5.1 Google

On our website we use services of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). The following information refers to all Google components across the board and is therefore not explained further in the following subsections to 5.1.

The use of Google tools always takes place only with your consent in accordance with Art. 6 (1) a) GDPR. You can refuse your consent or revoke it at any time via our Consent Manager (available in the footer) with effect for the future if you do not want Google to collect and process the aforementioned data for the respective purposes.

Your personal data will only be stored for the period of time for which they are required to fulfill the respective processing purpose. Your data will be deleted as soon as it is no longer required to achieve the purpose.

In addition to Google Ireland Limited, your data may also be transferred to the following recipients for processing:

• Google LLC.
• Alphabet Inc.

If personal data is processed by Google, this data may also be transferred to the USA. We ensure the transfer of your data through so-called standard contractual clauses, which we have built into our DPA with Google. These guarantee your data a contractual security level during processing that corresponds to that of the GDPR.

You can find more information about Google's privacy policy here: https://policies.google.com/privacy?hl=en.

5.1.1 Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google. Google Analytics 4 uses cookies to analyze your use of our website, to give us insights into user behavior and to help us improve our website and services.

The data generated by these cookies (e.g. IP address, page interaction, information about your browser) will be transmitted to and stored by Google on servers in different locations. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

However, your IP address will be shortened by Google by the last 4 digits, so that no direct personal reference is possible. The truncated IP address transmitted by your browser as part of Google Analytics will not be merged with other data collected by Google. The data collected in connection with the use of Google Analytics 4 is stored for a period of two months and then deleted.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.

5.1.2 YouTube

We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned under 2 are transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under 2 of this statement are transmitted. This occurs regardless of whether this third-party provider provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, this data is directly assigned to your account. If you do not want the assignment to your YouTube profile, you must log out before activating the button.

YouTube stores this data as usage profiles and uses it for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this.

The legal basis for the processing of the users' personal data is Art. 6 (1) f) DS-GVO. Via plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

Information of the third-party provider: YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA: https://policies.google.com/technologies/product-privacy?hl=en and https://policies.google.com/privacy?hl=en.

5.1.3 Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably. By using this service, our locations are displayed to you and a possible journey is made easier.

Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists.

If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 (1) f) GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and / or the design of Google websites to meet the needs. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely disabling the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://policies.google.com/terms?hl=en and the additional terms of use for Google Maps at https://www.google.com/intl/en_US/help/terms_maps/.

You can find detailed information about Google Maps privacy at: https://policies.google.com/privacy?hl=en.

5.2 econda

We use components of econda GmbH, Eisenlohrstr. 43, 76135 Karlsruhe, Germany (hereinafter econda) on our website. The following information relates to all econda components and is not explained further in the subsections of 5.2 below.

Each time you visit our site, these components collect and store data for marketing and optimization purposes. This happens exclusively with your consent - Art. 6 (1) a) GDPR. If you do not give us your consent, the econda solutions work in anonymous mode based on your current session. No data from you with a personal reference, such as the IP address, customer or order numbers, is stored. Furthermore, no cookies are set. You will not be recognized on subsequent visits to our website and profiling is not possible. The use of anonymized tracking is in accordance with Art. 6 (1) f) GDPR: The company has a legitimate interest in carrying out a range measurement in order to continuously optimize the online presence. Personalized tracking only takes place if you have given your consent.

econda processes your data according to our instructions, on our behalf and has committed itself to handling your data in a trustworthy manner. We ensure this through our DPA with econda. Furthermore, econda's servers are located in Germany, which means that your data does not leave the protected area of the GDPR at any time.

The data collection and data storage by econda can be revoked at any time with effect for the future. After your objection, an opt-out cookie will be stored on your end device. If you delete your cookies, you must start the objection process again.

More information about the third-party provider at: https://www.econda.de/en/

5.2.1 econda Analytics

For the purpose of demand-oriented design and optimization of this website, pseudonymized data is collected and stored by econda solutions and technologies, and usage profiles are created from this data using pseudonyms. econda works on our behalf. A transfer of the data to third parties or a transfer to third countries is excluded here.

Data processing purposes:

• Analytics
• Optimization

Without your opt-in, econda solutions work in anonymous mode based on the current session. No data with personal reference, such as the IP address, customer or order numbers, is stored. No cookies are set. You will not be recognized in subsequent visits and profiling is not possible. Please see point 5.2.2 for more information on anonymous tracking mode.

With your opt-in, cookies are used for the purpose described above, which enable the recognition of an Internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the explicit consent of the visitor. In particular, IP addresses are made unrecognizable immediately after receipt, making it impossible to assign usage profiles to IP addresses. You can, of course, revoke your consent at any time.

Technologies used:

• Cookie
• Local Storage

The use of anonymized tracking is in accordance with Art. 6 (1) f) GDPR. The company has a legitimate interest in carrying out a range measurement in order to continuously optimize the online presence. Personalized tracking is only carried out with your consent (Art. 6 (1) a) GDPR).

The following data are collected:

•   Information on the device used
•   Information about viewed pages within the website visit
•   Information within the ordering process
•   Information on access data
•   Customer data during login or entry

Visitors to this website can object to this data collection and storage at any time for the future in our Consent Manager (available in the footer).
The objection only applies to the device and browser on which it was set, please repeat the process on all devices if necessary. If you delete the opt-out information from the cookie and local storage, requests are transferred to econda again.

The processing and storage of data only takes place for the period of time required to achieve the respective processing purpose or as long as a legal retention period (in particular commercial and tax law) exists. After the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

You can find further information under: https://www.econda.de/en/data-protection/

5.2.2 econda Analytics - anonymous Tracking-Mode

For the purpose of demand-oriented design and optimization of this website, pseudonymized data is collected and stored by solutions and technologies of econda and usage profiles are created from this data using pseudonyms. econda works on our behalf. A transfer of the data to third parties or a transfer to third countries is excluded here.

Data processing purposes:

• Analytics
• Optimization

With your opt-in, cookies are used for the purpose described above, which allow the recognition of an Internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the explicit consent of the visitor. In particular, IP addresses are made unrecognizable immediately after receipt, which makes it impossible to assign usage profiles to IP addresses. You can, of course, revoke your consent at any time.

Technologies used:

• No persistent storage of data on end devices.

The following data is collected:

•   Information on the device used
•   Information about viewed pages within the website visit
•   Anonymized information within the ordering process
•   Anonymized information on access data

Visitors to this website can object to this data collection and storage at any time for the future in our Consent Manager (available in the footer).

The objection only applies to the device and web browser on which it was set, please repeat the process on all devices if necessary. If you delete the opt-out information from the cookie and local storage, requests will be sent to econda again.

5.2.3 econda ARP-Platform

In order to be able to offer individual content and product recommendations on our website, in the online store and in the newsletter, we collect data on movement and purchasing behavior. For this purpose, we use cookies and tracking methods.

In order to be able to offer an optimal visit and shopping experience in our online store, we create pseudonymized usage profiles that enable us to provide detailed advice. This allows us to ensure that products are displayed according to your interests and that uninteresting offers are hidden. Furthermore, it serves you for better orientation in our online store, since, for example, recently viewed products or products from your notepad can be displayed. The data is collected by solutions and technologies of econda and combined to a profile within the econda Audience Relationship Platform. econda works on our behalf. A transfer of the data to third parties or a transfer to third countries is excluded here.
Data processing purposes:

- Calculation of personalized recommendations

To create the pseudonymous user profile, we collect various data during your visit to our online store. These are among others:

•   Information on the device used
•   Information about viewed pages within the website visit
•   Information within the ordering process
•   Information on access and entry data
•   Customer data for creation of cross-device profiles.

An assignment of this data to a profile is only carried out with consent (opt-in) to profile creation in accordance with Art. 6 (1) a) GDPR. Through the consent given, we form an ID that identifies you as a returning visitor. Furthermore, we associate with login the browser or device used for purposes such as authentication, security and personalization of your account. According to your settings, we may associate information from different visits with different devices to display consistent and relevant information.
Furthermore, the processing and storage of data only takes place for the period of time necessary to achieve the respective processing purpose or as long as a legal retention period (in particular commercial and tax law) exists. After the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

5.2.4 Click Monitors

We also perform cookieless tracking on our website with the help of econda. In the case of anonymous tracking without the setting of cookies, no personal data is collected. With cookieless tracking, no cookies are set and there is no access to the local memory of the website visitor's end device. The IP address is not required for the transmission of statistical data. It is not transmitted and is not visible to econda at any time.

Statistical data can be assigned to an anonymous session for a limited period of time. The anonymous session has no personal reference. With the help of the anonymous session, page views can be combined into one visit for 24 hours.

econda is not able to assign the session to a device at any time. The anonymous session is used to summarize events in statistical evaluations. Only the following data is transferred to econda:

• Anonymous tracking data without personal reference (pages, clicks, device, browser).

Browser information
Time stamp used to generate the session
Information about the end device used
Referrer incl. metadata and click IDs
viewed pages incl. meta data

• The anonymized IP address forwarded by the proxy through custom domain tracking. This is used to associate the anonymous session, but is not persisted.

5.3 Revive Adserver

To manage advertisements, we use the OS software Revive Adserver installed on our own servers. The cookies already described above are used for this. We collect and store your usage data in pseudonymous profiles in order to control the delivery of advertising and to measure and evaluate contacts.

However, usage profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are made unrecognizable immediately after receipt, which means that it is not possible to assign usage profiles to IP addresses. Insofar as the data collected is related to a person, this is immediately excluded.

The legal basis for the processing of your data in this context is Art. 6 (1) f) GDPR. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

6. Social Media

Rutronik GmbH maintains many publicly accessible social media profiles with various providers. We would like to inform you about the associated data processing in the following:

6.1 On our website

On our website, we use elements from social media providers on which Rutronik GmbH maintains publicly accessible profiles.

You can usually recognize the social media elements by the respective social media logos. To ensure data protection on this website, we only use these elements together with the so-called "Shariff" solution. This application prevents the social media elements integrated on this website from transmitting your personal data to the respective provider when you first enter the page. Only when you activate the respective social media element by clicking on the associated button, a direct connection to the provider's server is established. Clicking in this case is your consent to the data transfer. As soon as you activate the social media element, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, the respective provider can assign your visit to this website to your user account.

Activating the plugin constitutes consent within the meaning of Art. 6 (1) a) GDPR and Section 25 (1) TTDPA. You can revoke this consent at any time with effect for the future.
The service is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 (1) c) GDPR.

6.2 On the operator’s website

We would like to point out that social networks such as Facebook, Twitter, etc., can generally analyze your user behavior. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations relevant to data protection.

In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media presence. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policy of the respective social media provider.

Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) a) GDPR).

Responsible party and assertion of rights
If you visit one of our social media profiles, we are jointly responsible with the provider of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (see point 8) both against us and against the provider of the respective social media portal.

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. This does not apply to mandatory legal retention periods. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions remain unaffected by this.

We have no influence on the storage period of your data, which is stored by the providers of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy).

Your rights
You are entitled to the data subject rights under the GDPR at any time. We have broken down what these are and what they include for you in point 8.

7. Contact for data protection inquiries

If you have any questions or wish to exercise any of your data protection rights as explained below, please feel free to contact us at any time by e-mail at dsb@rutronik.com.

In the event that you wish to contact our data protection officer directly in confidence, please use the following e-mail address: dsb@gvw.com

8. Your rights as a data subject

The GDPR regulates certain rights that data subjects can assert against the controller. We would like to inform you about these in more detail below. The exercise of these rights can be asserted against Rutronik GmbH at any time.

8.1 Right to confirmation

Confirmation as to whether personal data relating to you is being processed by Rutronik GmbH.

8.2 Right to information

To receive information about the personal data stored about him/her and a copy of this information. In addition, the European Directive and Regulation-maker has granted the data subject access to the following information:

•   the purposes of processing
•   the categories of personal data that are processed
•   the recipients or categories of recipients to whom the personal data have been or will be disclosed
•   the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining it
•   the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or to obtain the restriction of processing by the controller, or a right to object to such processing
•   the existence of a right of appeal to a supervisory authority
•   if the personal data are not collected directly from the data subject: Any available information about the origin of the data
•   The existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
•   Statement as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

8.3 Right to rectification

An immediate correction of concerning inaccurate personal data.

8.4 Right to erasure (right to be forgotten).

The immediate erasure of the personal data concerned, provided that one of the following reasons applies and to the extent that the processing is not necessary:

•   The personal data was collected or otherwise processed for such purposes for which it is no longer necessary.
•   The data subject revokes his or her consent on which the processing was based pursuant to Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR and there is no other legal basis for the processing.
•   The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
•   The personal data have been processed unlawfully.
•   There is no exceptional circumstance pursuant to Art. 17 (3) GDPR.

If the personal data has been made public by Rutronik GmbH and our company as the controller is obliged to erase the personal data pursuant to Art. 17 (1) GDPR, we have taken reasonable measures to do so, considering the available technology and the costs of implementation.

8.5 Right to restriction of processing

You have the right to initiate restriction of processing (blocking) of your personal data. The prerequisites for this are:

•   The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
•   The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
•   The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercise or defense of legal claims.
•   The data subject has objected to the processing pursuant to Article 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

8.6 Right to data portability

The transfer of the personal data concerned in a structured, common and machine-readable format.

8.7 Right to object

A timely independent objection to the processing of personal data concerned based on Art. 6 (1) e) or f) DS-GVO.
Rutronik GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

8.8 Automated decisions in individual cases including profiling.

As a responsible company, we do not use automated decision-making or profiling.

8.9 Right to withdraw consent granted under data protection law.

The temporally independent withdrawal of a granted consent to the processing of personal data with effect for the future.

8.10 Right of complaint

As a data subject, you have the right to lodge a complaint with the competent supervisory authority at any time. For Rutronik GmbH, the competent supervisory authority is:

State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Lautenschlagerstraße 20            FAX: +49 (0) 711 / 615541-15
70173 Stuttgart                E-Mail: poststelle@lfdi.bwl.de
Tel.: +49 (0) 711 / 615541-0        www.baden-wuerttemberg.datenschutz.de

9. Use of Video-Conference-Tools

For communication with our business partners, we use video conferencing tools, among others. When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by us and the provider.

We use Microsoft Teams as a video conferencing tool. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter Microsoft). We have concluded an AVV with Microsoft for the use of Microsoft Teams and have implemented the standard contractual clauses regarding the transfer of data to the USA. For details on data processing, please refer to the Microsoft Teams privacy policy: privacy.microsoft.com/de-de/privacystatement.

Microsoft Teams collects all data that you provide or use for its use:

•   Email address and/or your phone number,
•   Duration of the conference,
•   Start and end of your participation in the conference,
•   Number of participants,
•   Other "contextual information" related to the communication process (so-called metadata).

Furthermore, Microsoft processes all technical data that is required to process the online communication:

•   IP addresses,
•   MAC addresses,
•   Device IDs,
•   Device type,
•   Operating system type and version,
•   Client version,
•   Camera type,
•   Microphone or speaker,
•   Connection type.

If content is shared, uploaded, or otherwise made available within Microsoft Teams, it will also be stored on Microsoft's servers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have full control over Microsoft Teams' data processing operations. Our ability to do so is largely determined by Microsoft's corporate policy.

Purpose and legal basis
We use Microsoft Teams to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 b) GDPR). Furthermore, the use serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 (1) f) GDPR). Insofar as consent has been requested, the tools in question are used on the basis of this consent (Art. 6 (1) a) GDPR); consent can be revoked at any time with effect for the future.

Storage period
The data collected directly by us via Microsoft Teams is deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data, which is stored by Microsoft for its own purposes. For details, please contact Microsoft directly: https://privacy.microsoft.com/en-us/privacystatement