Name and address of the controller:

The responsible body within the meaning of the General Data Protection Regulation (GDPR) is:

RUCH NOVAPLAST GmbH
Appenweierer Str. 51+54
77704 Oberkirch
Germany

Tel +49 7802 806-0
Mail info@ruch.de

Name and address of the data protection officer:

DSB Baden GmbH
Mr Thomas Schneider

Privacy statement according to Article 13 GDPR

The protection of your personal data at the time of collection, processing and use during your visit to our homepage is a very serious issue for us. All of your personal information such as name, address, telephone number, email address, account number, etc. as well as all information that can be traced back to you is termed as personal data. This also includes the IP address that is automatically transmitted by your visit to a website. Technically, this is absolutely essential.

We would like you to know, when do we collect which data and how do we use it. We have taken technical and organisational measures, which ensure that the specifications about the data privacy are followed by us as well as possible external service providers. While doing so, the general data protection regulation (GDPR) www.dsgvo-gesetz.de) of the European Union (EU) to be implemented from 25.05.2018 and the national TTDSG (Telecommunication and telemedia law) is especially taken into consideration by us.

Personal data is automatically collected on this website only in the technically necessary extent.

Below you can find information as to which data is collected during your visit to the homepage and how is it used.

If you want to claim your rights (see below), please contact us as the party responsible for the data processing on this website – please take the contact data for this from the About Us section.

In case of basic questions or issues concerning the data protection, please contact our external data protection officer (DSB) in writing at datenschutz@ruch.de. Please also state our company name in the subject line so that the external DSB can easily assign it.

Collection and processing of personal data

Website access

If you visit our website, your IP address will be automatically transmitted, as well as other information. We automatically record every access to our homepage as well as every possible retrieval of any of the files on the homepage.

What is recorded: Name of the retrieved file, date, time of retrieval, transferred data volume, notification of successful retrieval and web browser. The IP address is also recorded for a short time (maximum 7 days) for reasons of safety and the availability of the website and in accordance with § 12 of Telecommunication Act (TTDSG) (disruption of telecommunicaton systems and misuse of telecommunication services). Access to this protocol only takes place in the event of security breaches for the purpose of criminal prosecution. Personal user profiles are not generated.

The basis for this processing is also Article 6 section 1 lit. b of GDPR, which permits the processing of data for fulfilling a contract or pre-contractual actions.

Provided we would like to use the transmitted IP addresses anonymously for other purposes, they are described in detail below.

Information requirements under Art. 13 GDPR

We are obligated by the general data protection regulation to provide relevant information in case of every collection of personal data that takes place directly from the concerned person. In the context of our website, we collect personal data from you and would therefore like to inform you accordingly. This collection happens if we, for example,

collect your IP address for the technical provision of the website,
use a tracking tool that uses the IP address,
receive your input in a contact module for communication with us.

Basic procedure:
If you have provided us personal data, we only use it to answer your queries, for the technical administration. The exception is the anonymised IP address for statistical analysis.
Your personal data is forwarded or otherwise transmitted to third parties only if it is necessary for the purpose of execution of contract – especially forwarding of order data to suppliers, if it becomes necessary for billing purposes, if we are legally obliged to do it, in the context of order processing by subcontractor or if you have consented to it in advance. You have the right to withdraw the consent at any time with effect for the future.
The saved personal data is deleted if you withdraw your consent to save it, if its knowledge is no longer necessary for fulfilling the purpose pursued with the storage, in other words, the process is settled and no legal deletion periods prevent the deletion or if its storage is not permitted for other reasons. If it is not possible to delete the data due to technical reasons, we shall make you anonymous so that a personal reference can no longer be established in the future.
All collections or processing of this website are the responsibility of our company.

Supplementary detailed information can be found in the following points.

Contact form

If you contact us using our website, we collect various personal data from you with the contact form. We need the mandatory fields that are marked with a star for a sensible processing of your issue – other information is voluntary. With this data specified by you, an encrypted email to us is directly generated – without caching, which you transmit to us by sending. With this, we meet the specifications for appropriate technical and organisational provisions as per § 13 para. 7 of the Telemedia Act as well as Art. 32 para. 1 of the GDPR by encrypting according to the “state of the art”
We use this information exclusively for processing your query. The process described above is necessary for us here. If it should be necessary for the processing, we include other areas for processing your issue, considering the applicable legal specifications (e.g. in the course of an order processing). If your information was transmitted for the purpose of or in the context of a business relationship with us, we save your contact data for this in our internal systems. Your actual issue can also be maintained in internal systems (e.g. ticket system, email system), in order to enable the process of the internal processing.
Since we assume an indefinite business cooperation, we delete or anonymise this data only upon request (see your right to deletion in later part) or if the purpose for the data storage is inapplicable, provided no legal retention periods or deletion periods prevent it.
With the transmission of your personal data to us, you declare your consent for the processing of your personal data according to the present privacy statement (permission as per Art. 6 section 1 lit. a of GDPR). If your information is necessary for fulfilling a business relationship (“contract”), then it is the legal basis for the processing.

Login to our website

Employees can register on our site with a login and thus get the option to use further functions or to retrieve special information.

Administrators can similarly register themselves on this site with existing login and then have further options.

These options are set up only for the company’s internal purposes; the legal basis for this can be found in Art. 6 section 1 lit. b, in particular cases, also in Art. 6 section 1 lit. f.

Cookies

The internet sites use so-called cookies in multiple areas. These are small text files that are stored on your computer and saved by your browser. They can have several different functions: cookies allow for a more comfortable internet use for the user. By setting these, the internet gets a type of memory – the internet site thus remembers, for example, that the user has already retrieved this previously and makes it unnecessary to log in again in case of an encrypted site. Cookies enable the determination of even complex usage and surfing behaviour. They can save information on usage behaviour and transmit it to the user. Thus, the use of cookies enables forming a profile, which must be critically considered in terms of data privacy law.

Cookies are primarily used in the area of online marketing, when personal advertises are placed. The activities are summarised under the keyword “targeting”, which should enable target group oriented showing of advertisements on websites. A continuation of this advertising strategy is the so called re-targeting, in which a seller/advertiser marks the customer by a tracking cookie upon his visit to the company’s own homepage and then keeps track of him in his ramble through the internet and regularly advertises his own advertisements to the customer, on external websites as banners, to deliberately remind the customer of the advertiser’s own products.

We do not employ cookies for “targeting” on our website.

The majority of the cookies used by us are the so called “session cookies”. They are automatically deleted at the end of your visit. Please find possible special versions for a cookie in case of explicit areas of use from other areas of this privacy statement or from dialogue/banner notifications.

You can configure your browser such that you are informed about the placement of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies while closing the browser. The functionality of this website can be restricted upon deactivation of cookies.

Cookies that are necessary for executing the electronic communication process or for provision of certain functions you desire are saved on the basis of Art. 6 section 1 lit. f of GDPR (“Processing for protecting a legitimate interest”). The website operator has a legitimate interest in the storage of cookies for technically faultless and optimised provision of his services. If other cookies (e.g. cookies for analysis of your surfing behaviour) are saved, they are separately handled in this privacy statement.

Links to other websites

Our offering contains links to external websites of third parties, on the contents of which, we have no influence. Therefore, we also cannot take any liability for these external contents. It is always the respective seller or operator of the sites who is responsible for the contents of the linked sites. The linked sites were reviewed for possible legal violations at the time of linking. Unlawful contents could not be identified at the time of linking. A permanent content monitoring of the linked sites is however not reasonable without specific evidence of a legal infringement. If and when a legal infringement becomes know, we will immediately remove such links. Please note the privacy statements of the third parties to whose sites the link follows.

We would like to point out that you reach an external encrypted site, especially through the link “all open vacancies”.

Special link: Google Maps

We have included a button on our website with a link to Google Maps so that is easier for you to determine our location on a map. We have marked this link accordingly with "Open directions in Google Maps". Please note that you will leave our website upon confirming the button.

When you use this link to Google Maps, Google Inc. receives information about where you accessed their tool from, among other things. Details can be found in the Terms of Use of Terms of Service of Google Maps or at Google's Privacy Statement at https://policies.google.com/privacy. Please note that Google also receives information about your visit when you confirm these links, which they can use for their own purposes in accordance with your General Terms and Conditions.

Data processing via social media

We are represented on several social media platforms with a company page. Through this, we would like to provide further opportunities for information about our company and for exchange. Our company has pages on the following social media platforms:

Facebook
LinkedIn

When you visit or interact with a profile on a social media platform, personal data concerning you may be processed. The information associated with a social media profile used also regularly constitutes personal data. This also includes messages and statements made when using the profile. In addition, during your visit to a social media profile, certain information is often automatically collected about this visit, which may also constitute personal data.

Visiting our social media pages

Facebook

Certain information about you is processed when you visit our Facebook page, through which we present our company or individual products from our portfolio. The sole Controller of this processing of personal data is Facebook Ireland Ltd (Ireland/EU - “Facebook”). For further information on the processing of personal data by Facebook, please visit https://www.facebook.com/privacy/explanation.

Facebook offers the possibility of objecting to certain data processing procedures; for relevant information and opt-out options, please visit https://www.facebook.com/settings?tab=ads.

Facebook provides us with anonymised statistics and insights for our Facebook page, which help us gain knowledge of the types of actions persons perform on our page (so-called “page insights”). These page insights are created on the basis of certain information about persons who have visited our page. This processing of personal data is performed by Facebook and us as joint Controllers. This processing serves our legitimate interest to analyse the types of actions performed on our page and to improve our page using this knowledge. The legal basis for this processing is Art. 6 para. 1 clause f GDPR. We cannot relate the information gained through page insights to individual Facebook profiles that interact with our Facebook page. We have entered into a Joint Controller Agreement with Facebook, which determines the distribution of data protection obligations between us and Facebook. For details about the processing of personal data for the creation of page insights and the agreement concluded between us and Facebook, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data.

In relation to this data processing, you have the possibility to assert your rights as a data subject (see “Your rights”), also against Facebook. For further information on this, please refer to Facebook's privacy statement at https://www.facebook.com/privacy/explanation.

Please note that, according to the provision of Facebook's privacy statement, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which an adequacy decision has been issued by the European Commission in accordance with Art. 45 of the GDPR or on the basis of appropriate guarantees in accordance with Art. 46 of the GDPR.

LinkedIn Ireland Unlimited Company (Ireland/EU - “LinkedIn”) is always the sole Controller of the processing of personal data when you visit our LinkedIn page. For further information on the processing of personal data by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

When you visit, follow or address our LinkedIn company page, LinkedIn processes personal data to provide us with statistics and insights in an anonymised form. This provides us with insights into the types of actions persons perform on our page (known as page insights). For this purpose, LinkedIn in particular processes data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, sector, years of service, company size and employment status. In addition, LinkedIn processes information on how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. With page insights, LinkedIn does not provide us with any personal data concerning you. We only have access to the summarised page insights. It is also not possible for us to draw conclusions about individual members using the information from the page insights. This processing of personal data in the context of page insights is performed by LinkedIn and us as Joint Controllers. This processing serves our legitimate interest to analyse the types of actions performed on our LinkedIn company page and to improve our company page using this knowledge. The legal basis for this processing is Art. 6 para. 1 clause f GDPR. We have entered into a Joint Controller Agreement with LinkedIn, which determines the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum. The following shall therefore apply:

LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn about this online via the following link (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) or via the contact details in the privacy policy. You can contact the data protection officer at LinkedIn Ireland via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You can also contact us about exercising your rights in relation to the processing of personal data in the context of page insights via our contact details provided. In such a case, we will forward your request to LinkedIn.
LinkedIn and we have agreed that the Irish Data Protection Commission is the leading supervisory authority monitoring the processing of page insights. You always have the right to files a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with any other supervisory authority.

Please note that in accordance with LinkedIn's privacy policy, personal data may also be processed by LinkedIn in the US or other third countries. LinkedIn only transfers personal data to countries for which an adequacy decision has been issued by the European Commission in accordance with Art. 45 of the GDPR or on the basis of appropriate guarantees in accordance with Art. 46 of the GDPR.

Processing of data you share with us via our social media pages

We also process information that you have provided to us via our company page on the respective social media platform. Such information may include the user name, contact details or a message to us. We regularly process this personal data only if we have previously expressly requested you to provide us with this data. These processing operations are carried out by us as the sole data controller. We process this data on the basis of our legitimate interest in contacting persons filing enquiries. The legal basis for the data processing is Art. 6 para. 1 clause f GDPR.

In addition, we may process such data for analysis and marketing purposes. This processing is performed on the legal basis of Art. 6 para. 1 clause f DSGVO and serves our interest to further develop our offer and to inform you in a targeted manner about offers of RUCH NOVAPLAST GmbH. Further data processing may take place if you have given your consent (Art. 6 para. 1 clause a) GDPR or if this serves the fulfilment of a legal obligation (Art. 6 para. 1 clause c) GDPR).

Your rights - Rights of the concerned person under GDPR

Art. 12-23 of GDPR govern the rights of the concerned person, i.e. your rights with reference to the handling of your personal data. These, with respect to us, are essentially:

Right to information, at the latest at the time of collection under Art. 13 of GDPR, with which we comply through this privacy statement.
Right to information in accordance with Art. 15 GDPR
Right to erasure in accordance with Art. 17 GDPR
Right to restriction of processing in accordance with Art. 18 GDPR
Right of objection in accordance with Art. 21 GDPR
If applicable: Right to data portability in accordance with Art. 20 GDPR

We shall support you in accordance with the GDPR and other legal specifications in asserting your rights.

Please contact the agency given under About us for queries related to the exercising of your rights. Please understand that, in the interest of the rights of other persons, we can also give personal information only if you can appropriately identify yourself. Therefore, we prefer the following procedure:
Upon written request, we will be comply with your request. You shall receive a registered letter with the corresponding documents for this. We request you for additional details of contact data (email and/or phone no.) due to possible queries.

In addition, you have a right of appeal to the competent supervisory authority. The competent authority is generally the data protection officer of the state in which our company has our registered office – for us, the data protection officer of the state Baden-Württemberg. A list of the data protection officers and their contact details can be found in the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Use of web analysis programmes

By using our website, you grant your consent for use of the mentioned web analysis programme, which is considered as the legal basis of the processing apart from the “legitimate interest” according to Art. 6 section 1 lit. f of the GDPR. You can assert your objection for the future in case of activation of an objection link or through corresponding browser configuration.

We do not use the data for identification of website visitors, but basically for statistical purposes, to optimise our web content. In this process, among other things, it is important for us to know how anonymised visitors move about on our website. The IP address is always shortened is such a way that an identification of the concerned person is no longer possible.

The data is forwarded only in case of involvement of a service provider for procurement or evaluation of the information in the context of an order processing under Art. 28 of GDPR.

Due to making the IP addresses anonymous, “personal data” no longer exists from this point in time.

Matomo

This website uses the open source web analysis service of Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, information about the use of this website generated by the cookie is saved on our server. The IP address is anonymised before the storage. Matomo cookies remain on your terminal device until you delete them.
The Matomo cookies are saved based on Art. 6 section 1 lit. f of GDPR. The website operator has a legitimate interest in the anonymised analysis of the user behaviour to optimise his web content as well as his advertisement.
The information about the use of this website generated by the cookie is not passed on to third parties. You can prevent the storage of cookies by a corresponding browser software setting; we however would like to point out to you that you would probably not be able to use all functions of this website in this case.
If you do not agree to the storage and use of your data, you can disable the storage and use here. In this case, an opt-out cookie will be deposited on your browser that prevents Matomo from saving usage data. If you delete your cookies, then consequently, the Matomo opt-out cookie is also deleted. The opt-out must be enabled again upon visiting our site again.

Your visit to this website is currently recorded by Matomo (formerly Piwik) web analysis. Please click here so that your visit is no longer recorded.

Video surveillance

PDF Video surveillance

Safety instruction

We are always keen to save your personal data by using all technical and organisational facilities such that it is not accessible for third parties. In case of a communication over an unencrypted email, complete data security cannot be guaranteed by us so, we recommend an encrypted path or the postal way for confidential information.