1. WHO IS YOUR CONTACT PERSON (RESPONSIBLE) FOR YOUR DATA PROTECTION CONCERNS?

Responsible in terms of data protection regulations for all data processing processes via our websites is:

Rauch Möbelwerke GmbH
Wendelin-Rauch-Straße
97896 Freudenberg
GERMANY

Phone +49 (0) 9375 81-0
Fax +49 (0) 9375 81-700 

E-Mail: verkauf@rauchmoebel.de

________________________________________________________________

In accordance with legal requirements, we have appointed

Mr. Michael Lazarus
Wendelin-Rauch-Straße, 97896 Freudenberg, Germany
Phone +49 (0) 9375 81-520
E-Mail: dsb@rauchmoebel.de

as data protection officer in our company.

Inquiries regarding data protection and the assertion of rights of persons affected (see below) should be addressed to the aforementioned address for the attention of our data protection officer.

________________________________________________________________

2. WHAT DATA DO WE NEED FROM YOU FOR THE USE OF OUR WEBSITES? WHAT DATA IS COLLECTED AND STORED DURING USE?
 

Personal data is all information relating to an identified or identifiable natural person ("data subject"), such as your name, address, telephone number, date of birth, bank details and IP address. 

We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users takes place regularly only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.

USAGE DATA

When using our websites, the following data is logged, whereby the storage serves exclusively internal system-related and statistical purposes, so-called usage data:

1. page name
2. activities
3. visit duration
4. Date and time of the first and last visit
5. IP address of the user (last 2 digits are anonymized)
6. Internet service provider of the user
7. User's country
8. State of the user
9. browser language
10. browser type
11. operating system
12. device type
13. device model
14. display resolution

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. 

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. 

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. 

The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. 

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. 

If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

CONTACT FORMS
 

On our website we have a form for ordering printed matter and a form for ordering "energy labels", which you can use to contact us conveniently electronically and address your request to us. We use the form for ordering printed matter to collect your name and address data in order to send you the printed matter by post. Optionally we collect your company name, country as well as your e-mail address for further inquiries.

For the order of EU energy labels we collect the language in which the label is to be created, company name, contact person/orderer, for queries your telephone number, e-mail if you wish the dispatch by e-mail and/or your address data if you have selected dispatch by post. Furthermore, we collect model name(s) or model number(s) to create the energy label as well as optional article number(s) and article description.  (e.g. "wreath lighting", "headboard lighting", etc.)).

Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the e-mail addresses provided. In this case, the user's personal data transmitted by e-mail will be stored. 

We use your data only to process your request and can contact you for this purpose using the contact data provided. These data will not be used for advertising purposes or passed on to third parties. 

The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if the user has given his consent. 

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b GDPR.

The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. 

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. 

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us via the above e-mail address, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. 

All personal data stored in the course of contacting us will be deleted in this case.

3. HOW WILL MY DATA BE USED AND, IF NECESSARY TO THIRD PARTIES AND FOR WHAT PURPOSE?
 

We use the personal data you provide to answer your inquiries, to send information PDFs (e.g. assembly instructions, individual parts lists) and to send printed documents (e.g. brochures). 

4. REFERENCES TO EXTERNAL SERVICES OF SOCIAL NETWORKS
 

On our websites we link to the social media platforms Facebook, Instagram and Pinterest and have embedded YouTube videos of our channel. Social plugins (like the Facebook "I like" button) are not included. 

Our references to social media services do not transfer any data from you to these services. These are normal hyperlinks, via which no data is regularly transmitted. If you click on the link, you will be redirected to our social media presence at the respective social media service. Data will only be transmitted if you are logged in to your user account of the corresponding social media service. You can then link or share content from our websites directly with the social media service or, in the case of YouTube, watch the videos on our YouTube channel. The respective social media service may find out what content you have viewed on our websites.

Responsible for the social media services linked by us are exclusively:

• for Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA;
• for Instagram and its website Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
• Pinterest Inc. 808 Brannan Street, San Francisco, CA 94103, USA;
• for YouTube and its website YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA.

For further information on the purpose and scope of data collection and on the further processing and use of your data by the respective social media service, please refer to the data protection provisions of the respective service. These are available on the Internet:

Facebook: https://www.facebook.com/about/privacy/

Instagram: https://www.instagram.com/about/legal/privacy/

Pinterest: https://policy.pinterest.com/en/privacy-policy

YouTube: https://www.google.de/intl/de/policies/privacy/

Among the links mentioned you will also find information about setting options for the protection of your privacy and about your further rights regarding the collection, processing and use of your data by the respective social media service.

You are responsible for the data transmission to the aforementioned social network services, since by logging into your respective social network account and following the respective link you become active yourself and thus initiate the subsequent data processing by the respective social network service.

5. WHAT SECURITY MEASURES HAVE WE TAKEN TO PROTECT YOUR DATA?
 

We have taken a variety of security measures to adequately protect personal information. 

Our databases are protected by physical, technical and procedural measures that restrict access to the information to specially authorized persons in accordance with this Privacy Policy. Our information system is located behind a software firewall to prevent access from other networks connected to the Internet. Only employees who need the information to perform a specific task will have access to personal information. Our employees are trained in security and privacy practices. 

We use standardized SSL encryption technology for the collection and transmission of data via our Internet pages. Personal data is transmitted during the ordering process via SSL encryption, which can be recognised by the lock symbol in the browser and by the addition "https://" in the address bar. 

When communicating by e-mail, we cannot guarantee complete data security. 

6. ADVERTISING BY E-MAIL (E.G. E-MAIL NEWSLETTER)
 

On our website you have the possibility to subscribe to a free newsletter. When registering for the newsletter, the following data from the input mask is transmitted to us:

• Gender (for personal address)
• name
• email
• optional: name of the editorial office 

In addition, the following data is collected upon registration:

1. IP address of the accessing computer
2. Date and time of registration

During the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration.

In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR.

The collection of the user's e-mail address serves to send the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. Alternatively, you can unsubscribe using the registration form by entering your data there in the same way as when registering, but then clicking on "Unsubscribe" and confirming your entry.

This also makes it possible to revoke the consent to the storage of personal data collected during the registration process.

7. NEWSLETTER-TRACKING 
 

We use so-called newsletter tracking in our e-mail messages.

This results in an evaluation of the opening rate of the e-mails and a click evaluation within the newsletter.

We use this technology to determine the degree of interest in specific topics and to measure the effectiveness of our communication measures. This is also our legitimate interest according to Art. 6 para. 1 lit. f GDPR.

This data is segmented and stored anonymously. We do not exchange this information with anyone and we do not attempt to link click-throughs to individual email addresses.

The individual user data will be deleted after creation of the anonymized overall evaluation, - at the latest after 3 months. 

8. WHEN USING OUR WEBSITE, A COOKIE IS STORED ON YOUR COMPUTER. WHAT DOES THAT MEAN?
 

We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard disk. Cookies can only be read by the server that previously stored them and receive information about what you have viewed on a website and when. Cookies themselves only identify the IP address of your computer and do not store any personal information, such as your name. The data stored in the cookies are not linked to your personal data (name, address, etc.). 

We use cookies to make our website more user-friendly. We use a cookie, which is set by a user interaction. This is set as soon as the declaration of consent of the cookie policy - in the form of a message when the page is called up - has been closed. After this cookie is set by a user interaction, the cookie expires automatically after 30 days and the request for consent appears again. 

We also use cookies on our website which enable an analysis of the user's surfing behaviour.

These are 1st-party cookies generated by our Matomo. These "persistent" cookies are stored on the computer and only lose their validity once the expiry date assigned to them has expired. This enables us to recognize whether a visitor has visited our site before and what content this person is (has been) interested in. 

The data is collected anonymously; we cannot draw any conclusions about the identity of the person. 

pk_id.17.0810 has an "expiration date" of 13 months 

_pk_ses.17.0810 has an "expiration date" of 30 minutes 

You can decide here whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data. If you choose not to, click the link in paragraph 9b of this Statement to place the Matomo opt-out cookie in your browser. 

The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with other personal data of the users. 

You can decide yourself whether you want to accept cookies. Firstly, by changing your browser settings (usually under "Option" or "Settings" in the browser menus), you have the choice of accepting all cookies, being informed when a cookie is set or rejecting all cookies. On the other hand, the banner that is displayed the first time you visit our website and refers to this data protection declaration allows you to freely decide whether you want to give us your consent or reject this for the setting of cookies.

By agreeing to the banner, you agree that we may place cookies on your end device and process them for the purposes stated in this Privacy Policy. You can revoke your consent at any time to the contact data mentioned under 1. The legality of data processing based on the consent until revocation remains unaffected by this. 

The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.

The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. 

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR. 

Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in their entirety.

The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the Flash Player settings.

 9. USE OF MARKETING AND ANALYTICAL SERVICES
 

We use the analysis tool Matomo. What does this mean for your data?

On our web pages we use the open source web analysis software Matomo. Matomo also uses "cookies" (see above 8.), which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is transferred to our own server and stored there. We will use this information to evaluate your use of the website and to compile reports on website activity. The data is therefore collected and stored solely for our own marketing and optimisation purposes. These data can be used to create user profiles under a pseudonym that enable your Internet browser to be recognized. The data will not be used to personally identify you as a user of our websites and will not be combined with personal data about you as the bearer of the pseudonym.

We would also like to point out that Matomo is used on our web pages with the extension anonymizeIP and therefore IP addresses are only processed further in abbreviated form in order to exclude a personal reference.

This will place an opt-out cookie on your device that prevents Matomo from collecting your data in the future when you visit this website. 

Please note that if you delete cookies in your browser settings, Matomo may also delete the opt-out cookie and you may need to activate it again. 

For more information on how Matomo works and the privacy policy applicable to this service, please visit https://matomo.org/privacy-policy/.

a) We use Google Maps plugins. What does this mean for you? 

We use a plugin of the internet service Google Maps on our website. Google Maps is operated by Google Inc. located in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. By using Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the data transmitted, nor of their use by Google. In this context, the company denies the connection of the data with information from other Google services and the collection of personal data. However, Google may transfer the information to third parties. If you disable Javascript in your browser, you prevent Google Maps from running. However, you will not be able to use the map display on our website. By using our website, you consent to the collection and processing of the information by Google Inc. For more information on the privacy policy and terms of use for Google Maps, please visit www.google.com/intl/de_en/help/terms_maps.html.

10. YOUR RIGHTS (IF AFFECTED)
 

If personal data are processed by you, you are affected within the meaning of the DS-GMO and you have the following rights vis-à-vis the person responsible: 

Information, correction, limitation of processing and deletion

You have the right to free information about your personal data stored by us, its origin and recipient as well as the purpose of data processing via our websites at any time. Furthermore, you have the right to correct, delete and restrict the processing of your personal data, provided that the legal requirements are met. 

Right to data transferability 

You have the right to receive the personal data concerning you that you have provided to us as data controller in a structured, common and machine-readable format. We can fulfill this right by providing a csv export of the customer data processed about you.

Right to information 

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. 

The person responsible shall have the right to be informed of such recipients. 

right of objection 

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art.6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. 

The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing. 

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. 

You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC. 

Revocability of declarations of consent under data protection law 

In addition, you can revoke your consent at any time with effect for the future by contacting us at the contact details given below. 

Right of appeal to a supervisory authority 

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you is contrary to the EU Data Protection Regulation. 

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. 

11. CHANGES TO THIS PRIVACY POLICY
 

We reserve the right to change this data protection declaration for any reason and without prior notice. Therefore, please inform yourself regularly on this page about possible changes to this data protection declaration.

Thank you for taking the time to read this policy.

Last update: 02/2023