Legal details and data protection statement - WAREMA Renkhoff SE Reference

Data privacy at WAREMA

Your rights as a data subject

Firstly we would like to take this opportunity to inform you of your rights as a data subject. These rights are standardised in articles 15 - 22 of the EU-GDPR. This includes:

• The right of access (art. 15 of EU-GDPR),
• The right to erasure (art. 17 of EU-GDPR),
• The right to rectification (art. 16 of EU-GDPR),
• The right to data portability (art. 20 of EU-GDPR),
• The right to restriction of processing (art. 18 of EU-GDPR),
• The right to object to data processing (art. 21 of EU-GDPR).

To assert these rights, please contact:

WAREMA Renkhoff SE
Data protection officer
Hans-Wilhelm-Renkhoff-Straße 2
97828 Marktheidenfeld

The same applies if you have questions about data processing in our company or would like to revoke granted consent. You also have a right of complaint to a data protection authority.

Data privacy information and accountable body with regards to data privacy

We would like to thank you for visiting our website and are delighted that you are interested in our company. The protection of your personal data is an important issue for us. We process your data in compliance with the applicable legal provisions for protection of personal data, in particular the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementing laws that are applicable to our company.

Our data privacy statement will explain to you what personal data we gather from you through our website, what we use them for, when we delete them and how your data are given the best protection through security measures. In addition we will advise you of the legal basis that allows us to process data in each case.
What's more, you will be informed of your rights established in law in relation to the processing of these data.

Personal data are information that makes it possible to identify a natural person. This includes, in particular, names, dates of birth, addresses, phone numbers and e-mail address, as well as your IP address.

Data are anonymous if no personal connection to the user can be established.

The accountable body for the purposes of data privacy law is:

WAREMA Renkhoff SE
Hans-Wilhelm-Renkhoff-Straße 2
97828 Marktheidenfeld
or datenschutz@warema.de

Please send any questions, complaints and messages that you may have to the email address datenschutz@warema.de

Your rights as a data subject
First of all, we would like to take this opportunity to inform you of your rights as a data subject. These rights are standardised in articles 15 - 22 of the EU-GDPR. They include:

Right of access (Art. 15 EU-GDPR),
Right to erasure (Art. 17 EU-GDPR),
Right to rectification (Art. 16 EU GDPR),
Right to data portability (Art. 20 EU-GDPR),
Right to restriction of processing (Art.18 EU-GDPR)
Right to object to data processing (Art. 21 EU-GDPR)

To assert these rights, please contact:

WAREMA Renkhoff SE
Data protection officer
Hans-Wilhelm-Renkhoff-Straße 2
97828 Marktheidenfeld
datenschutz@warema.de

The same applies if you have questions about data processing in our company or would like to revoke granted consent. You also have a right of complaint to a data protection authority.

Rights to object

If we process your personal data for the purpose of direct advertising, you have the right to object to this data processing at any time without stating any reasons. This also applies to any profiling, insofar as it is associated with direct advertising.

If you object to processing for purposes of direct advertising we will no longer use your personal data for these purposes. Objection is free of charge and can be submitted in any form, preferably to:

WAREMA Renkhoff SE
Data Privacy
Hans-Wilhelm-Renkhoff-Straße 2
97828 Marktheidenfeld
datenschutz@warema.de .

In the event that we process your data in order to maintain justified interests, you can object to this processing at any time for reasons that arise from your particular situation; this also applies to any profiling supported by these regulations.

We will then no longer process your personal data unless we can demonstrate mandatory legitimate reasons for processing that outweigh your interests, rights and freedoms or processing is done for the purposes of asserting, exercising or defending legal claims.

Data collection / Personal data

We generally do not require any personal data from you when you visit our website. You only transmit data to our web server when our website is accessed (out of technical necessity) via your internet browser. During the ongoing connection for communication between your internet browser and our web server, the following data are recorded:

Web browser and operating system used
Name of the internet service provider
Information about the website from which you are visiting us
Information about the webpages that you access on our site, as well as date and time of visit
Name of the requested file, whether file e.g. has been transmitted, data volume transmitted
The IP address assigned by your internet service provider

For reasons of technical security, particularly to defend against attacks on our web servers, these data are stored by us according to art. 6, para. 1, point f of the EU-GDPR. After seven days at the latest, the data are anonymised by shortening the IP address to the domain level. A connection to the individual user is not established. The data are processed for statistical purposes only in their anonymised form.
The data we process beyond this is determined by the respective context. This depends on whether, for example, you place an order online or enter an inquiry into our contact form, or whether you send us an application or submit a complaint. Please note that we make information available for special processing situations and if necessary also in a suitable location, e.g. when uploading application documents or when as part of a contact request.

Other data collections

The regulations of the EU-GDPR and all other applicable regulations from data protection law are observed for processing your personal data. The legal foundations for data processing are derived in particular from art. 6 of the EU-GDPR.
This is the case, if, for example, your consent is received (Art. 6, para. 1, point a of the EU-GDPR), the data are required in order to fulfil a contract / pre-contractual measures (Art. 6, para. 1, point b of the EU-GDPR), the data are required in order to fulfil a legal obligation (Art. 6, para. 1, point c of the EU-GDPR) or the data are required in order to maintain justified interests of our company, insofar as your legitimate interests do not outweigh them (Art. 6, para. 1, point f of the EU-GDPR).

We use your data for initial business contact, to meet contractual and legal obligations, to execute the contractual relationship, to offer products and services and to improve relations with customers, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also represent a permission instruction. Before giving consent, we shall clarify the purpose of data processing and your right of revocation.
If the consent also relates to processing particular categories of personal data, we will explicitly refer to them in the consent. Particular categories of personal data are processed only if this is required by legal specifications and there is no reason to assume that this is outweighed by your legitimate interest to the exclusion of processing.

Recipients of data / Categories of recipients / Transfer to third parties

The collected personal data will of course be treated with confidentiality. Only authorised persons in our company who are each involved with the technical, commercial, editorial or customer management support, have access to your data. We will forward your data to third parties only in the context of the legal regulations or with corresponding consent, unless we are obliged to do so owing to mandatory legal requirements.
In certain cases, service providers support our specialist departments in fulfilling their tasks. The agreements required under data protection law are concluded with all service providers (e.g. dispatch, payment services, credit checks, IT service providers).

Contact form / Contact via e-mail (legal basis art. 6, para. 1, point a, b of the EU-GDPR)

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process your data given in the contact form in order to establish contact and answer your questions and wishes. In this case the principle of data economy and data avoidance is observed by requiring you to enter only the data that we strictly need from you in order to set up contact. These are your e-mail address and the message content itself. In addition your IP address is processed out of technical necessity and for legal safeguarding. All other data are voluntary fields and can be entered optionally (e.g. to answer your questions more individually).

If you contact us via e-mail, we will process the personal data shared in the e-mail only for the purpose of processing your query. No data collection beyond that takes place.

Leaflet order (art. 6, para. 1, point b of the EU-GDPR)

We process the data given by you in the context of the leaflet order only to carry out / execute the leaflet order, unless you agree to another use.

The principle of data economy and data avoidance is observed by requiring you to enter only the data that we strictly need in order to carry out the leaflet order or to fulfil our contractual obligations (i.e. your last name, first name, mailing address) or which we are obliged by law to collect (e.g. proof of identity for certain products, etc.).

In addition, your IP address is processed out of technical necessity and for legal safeguarding. Without these data we will unfortunately have to decline to deliver, since we are not able to carry it out.

You may of course provide more data about yourself, if you wish.

Registration / Customer account WAREMA plus (art. 6, para. 1, point a, b of the EU-GDPR)

If you are signing up/registering for WAREMA plus through Single Sign On, we would like to give the you the following expanded data privacy notes for WAREMA plus in addition to the existing data privacy conditions:

The personal data that you enter within the respective tools on our platform (for example to arrange meetings with specialist dealers, subscribing to newsletters, ordering samples) are used only for the respective stated purposes within the tool. The legal foundation for this is art. 6, para. 1, point a, b) of the EU-GDPR. The data are made accessible to the WAREMA sales partners in order to establish direct contact to arrange meetings.

The personal data given in each case are consolidated by us in the form of user profiles. This allows us for example to view your past orders or previous contact with us at a glance. It is also possible for us to view any communication with one of our specialist dealers, as long as it has taken place within our portal. This means that we can always give you the best possible advice and support. Usage for purposes beyond these shall not take place under any circumstances; in particular, the data obtained are not used or forwarded to third parties for marketing purposes, unless you explicitly agree to this. The data are not transmitted to third-party countries.

The data are held by us for only as long as you wish to use your profile on our portal. If you no longer approve of the data processing, you have the option of deleting your profile. In this case, all the associated data about you that we have stored are deleted. This excludes data that are required in order to fulfil legal obligations (retention periods) or to process ongoing business processes (invoicing, etc.).

WAREMA employs a service provider for data processing within the portal, with which the agreements required to protect your data are made.

Within the platform there, is the option of performing a search for dealers in your area using GPS data. In this case your GPS data are only transmitted with your explicit prior consent according to art. 6, para. 1, point a) of the EU-GDPR. The data, which are collected using a cookie, are used only for the purposes of locating specialist dealers in your area and for no other purposes beyond that, and are not saved or forwarded to third parties.

You have the right to obtain information regarding the personal data pertaining to you. Additionally, you have a right to rectification or erasure or to restriction of processing, as well as a right to object to processing and the right to data portability. Moreover you also have the right to submit a complaint to the supervisory authority. To do this, please contact datenschutz@warema.de.

If you have any questions about data processing in our portal, you can also contact our data protection officer at datenschutz@warema.de.

By registering on our website, the user's IP address and the date and time of registration are also saved (technical background data). By clicking on the "Register now" button, you give consent to your data being processed.

Without these data we will unfortunately have to decline the registration, since we are not able to carry it out. You may of course provide more data about yourself, if you wish.

Please note: The password that you have assigned is stored by us in an encrypted format. Employees of our company cannot read this password. As a result, they cannot inform you of your password if you have forgotten it. In this case use the "Forgot password" function, with which a new, automatically generated password is sent to you by e-mail. No employee is authorised to ask you for your password over the telephone or in writing. Therefore please never give out your password if you receive requests for it.

Once the registration process is complete, your data are stored by us to allow you to use the protected customer area. Once you sign in on our website with your e-mail address as your username and password, these data are provided for actions that you perform on our website (e.g. arranging meetings with a WAREMA specialist dealer). You can enter changes to the address here. Registered persons have the option of carrying out changes / corrections themselves to the billing or delivery address in the order history.

Newsletter and market research (art. 6, para. 1, point a of the EU GDPR)

WAREMA Renkhoff SE is interested in maintaining its customer relationship with you and in providing you with information and offers about our products / services. We therefore process your data in order to send you appropriate information and offers by e-mail, contact you for the purpose of market research or conduct surveys with you.

You can subscribe to a free newsletter on our website. The e-mail address given when you sign up for the newsletter and your name are used to send the personalised newsletter or for the purpose of market research. In this case the principle of data economy and data avoidance is observed, since only the e-mail address (if necessary, name as well for personalised newsletters) is marked as a mandatory field. Your IP address is also processed when ordering the newsletter out of technical necessity and for legal safeguarding.

WAREMA uses a newsletter web bug. The collected data are saved in an anonymous format.

If you no longer want this, you can at any time rescind approval for the use of your personal data for the purposes of direct advertising or market research; this also applies to profiling insofar as it is connected with direct advertising. If you rescind approval, we will no longer process your data for this purpose.
You can, of course, cancel your subscription at any time using the unsubscribe option provided in the newsletter, thus revoking your consent.

The rescission can also be submitted without giving reasons, free of charge and in any form and should preferably be sent to datenschutz@warema.de or by mail to

WAREMA Renkhoff SE
Data Privacy
Hans-Wilhelm-Renkhoff-Straße 2
97828 Marktheidenfeld

Germany.

Competition / Advertisement consent (art. 6, para. 1, point a, b of the EU-GDPR)

On our website you have the chance to participate in a competition on various occasions and at various times. If you fill in the competition form, we will process the data entered there exclusively in order to carry out the competition. The principle of data economy and data avoidance is observed by requiring you to enter only the data that we strictly need from you in order to carry out the competition and inform you in case of a win. These are e.g. your name and e-mail address. The mandatory fields are marked with an (*). Your IP address is also processed out of technical necessity and for legal safeguarding. The other fields are optional and can be filled in if you like.

Without the mandatory fields, we unfortunately cannot carry out the competition. You will not be able then to participate.

Within the competition form, you also have the option of granting us advertisement consent. It is of course also possible to participate in the competition without giving advertisement consent. If you give us consent by checking the relevant check box, we will also process your data in order to supply you by e-mail with information and offers about our products / services.

You can revoke your consent at any time without giving reasons at datenschutz@warema.de.

Candidate Management (art. 6, para. 1, point a, b of the EU-GDPR)

Thank you for your interesting in working with the WAREMA Group. We understand the importance of your data. We process the data you provide on the application form only to ensure that the application procedure is conducted effectively and correctly and to be able to contact you during this process. No data will be passed on to third parties without your consent.

You are required to provide personal data on the application form. We follow the principle of data economy and data avoidance by asking you to enter only the data we need to conduct a full review of your application documents, your curriculum vitae, for example, or the data which we are required to collect to comply with the law. In addition, your IP address is processed to satisfy technical requirements and statutory legislation.
Without your data, we are unfortunately unable to review your application documents. You are, of course, at liberty to provide us with other optional information as part of the application form.

In order to ensure the security and confidentiality of your data to the greatest possible extent, we implement the relevant security measures. Your application documents will only be handled and processed in our SmartRecruiters application system. This system has also been used to conclude the agreements required under data protection law.

We will store your data for the aforementioned purpose until the application procedure is complete and the required periods have lapsed - at the latest six months after a decision is received. You do, however, have the option of our storing your application documents for a longer period and/or comparing them to other vacant positions that match your profile. This is subject to your consent, which you will confirm with us by email upon request. You can withdraw your application from the system at any time, after which you will no longer be considered for the process.

You can, of course, revoke your consent at any time without giving reasons with effect for the future by telephoning +49 9391/20-4214, sending an email to philipp.dorsch@warema.de or a letter to Hans-Wilhelm Renkhoff-Straße 2, 97828 Marktheidenfeld.

Advertising purposes for existing customers (art. 6, para. 1, point f of the EU-GDPR)

WAREMA Renkhoff SE is interested in maintaining its customer relationship with you and in providing you with information and offers about our products / services. We therefore process your data in order to supply you by e-mail with appropriate information and offers.

If you do not want these data to be saved, you can object at any time to the use of your personal data for the purposes of direct advertising; this also applies to profiling, insofar as it is connected with direct advertising. If you lodge an objection, we will no longer process your data for this purpose. The objection can be submitted without providing reasons, free of charge and in any form and should preferably be sent to datenschutz@warema.de.

Automated decision-making including profiling according to art. 22, para. 1 and 4 of the EU-GDPR

No automated procedures are used to find out, for example, more about your interests or your purchasing behaviour based on your personal data (so-called profiling).

We do not use any fully automated processing procedures to bring about a decision.

Cookies (Art. 6, para. 1, point f of the EU-GDPR

Our internet page uses cookies at multiple points. They are used to make our internet presence more user-friendly, effective and secure. Cookies are small text files that are placed and saved on your device. Most of the cookies that we use are so-called "session cookies". These are automatically erased after your visit. Permanent cookies are automatically erased from your computer when their period of validity (generally speaking six months) has been reached or if you delete them yourself before the period of validity has elapsed. The cookies we use are used, for example, to display our site correctly and to display images correctly. It is therefore in our legitimate interest according to Art. 6 para. I point. f EU-GDPR to use these technically necessary cookies. Most web browsers accept cookies automatically. You can however also generally change your browser's settings if you would rather not send the information. You can then continue to use our website services without any restrictions.

Consent management by Usercentrics (Art. 6, para. I point f EU-GDPR)

This website uses Cookie Consent Technology from Usercentrics to obtain your consent for specific cookies to be saved on your device and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 München, Website: https://usercentrics.com/de/ (hereinafter "Usercentrics“).
The purpose of the data processing is the analysis and management of the consent granted in order to comply with our obligation to manage consent in compliance with GDPR. The use of Usercentrics serves as proof of granted and non-granted consent, as well as the management of these.
The legal basis for the management of your consent to the processing of your personal data is Art. 6 paragraph 1 point f GDPR. Our legitimate interest is the legally compliant documentation and verifiability of consent, the control of marketing measures on the basis of the granted consent as well as the optimisation of consent rates.
The following data are processed:

Your consent or revocation of your consent
Your IP address
Information about your browser
Information about your device
Time of your visit to the website

The consent ID (contains the aforementioned data) and the consent status incl. time stamp are stored in the local memory of your browser and on the cloud servers used simultaneously. Further processing only takes place if you make a request for information or withdraw your consent. In this case, the relevant information will be provided to Warema Renkhoff SE in a compact data format and plain text format for the purpose of data exchange (JSON file).
No user information is stored about the statistics on the use of the granted or not granted consent. Only the frequency and locations of the clicks are saved. The personal data is stored on a Google cloud server based in the EU (Brussels, Frankfurt am Main).
The data are erased as soon as they are no longer required. The corresponding cookie has a runtime of 60 days. The revocation document of a previously granted consent is kept for a period of three years. The storage is based, on the one hand, on our accountability in accordance with Art. 5 para. 2 GDPR. This mandates compliance with the processing of personal data in accordance with the basic data protection regulation. On the other hand, storage is also subject to the standard statute of limitations of three years according to Section 195 of the German Civil Code (BGB).
Contract for order processing
We have concluded a contract for order processing with Usercentrics. This is a contract prescribed by data protection law which guarantees that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Securing our website using Cloudflare (Art. 6 para. 1 point. f EU-GDPR)

We use the Content Delivery Network Service Cloudflare Inc. (101 Townsend St San Francisco, CA 94107) on our website.

Technically, the connection from your device to our website is routed through Cloudflare's network. This enables Cloudflare to recognise attacks on our website, for example. However, Cloudflare has no access to the data entered by you due to the permanently active TLS encryption.

When our website is accessed, cookies are set in your browser by Cloudflare. Cloudflare gathers statistical data about this visit to the website. The access data includes: name of the website accessed, file, date and time of access, quantity of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited site), IP address and the requesting provider.

Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimisation of the offer (e.g. to identify and protect against mass abusive access as part of denial of service attacks (DDoS) or to identify several legitimate accesses of different devices using one IP address).

Please read Cloudflare'S data protection regulations which are available here https://www.cloudflare.com/de-de/privacypolicy/. We use this service to ensure the availability of our website, to protect ourselves against attacks and to optimise the loading times of our website.
The use of this tool is based on our legitimate interest according to Art. 6, par. 1, point f of the EU-GDPR.
Your data are transferred to Cloudflare and thus to a third-party country for evaluation. See: Transmission to third countries / Intention of transmission to third countries

Use of Google Webfonts for correct display (Art. 6, para. 1, point f, EU-GDPR)

We use so-called web fonts on our websites in order to display the content on our websites in an appealing, correct and uniform manner across all browsers. The attractive and correct presentation of our content represents a legitimate interest. The webfonts we use are Google Webfonts from Google LLC (Google), Amphitheatre Parkway, Mountain View, CA 94043, USA.

A font is generally defined as a font located on a device or the environment connected to it. Web fonts make it possible to use fonts that are not stored on the PC of the visitor to our site or the device used to visit our site.

The fonts used on the website you are visiting are loaded into your browser cache by your browser when this page is accessed, so that the content (texts and characters) are displayed correctly. The browser you use connects to Google servers.

As part of this connection between your browser and Google, Google is informed that your IP address has accessed our website. However, according to the information provided by Google, personal data gleaned from other sources (e.g. if you are logged in to your Google account at the time of accessing our website) and the fact that your IP address is transmitted to Google when you access a website are not consolidated.

According to Google, the CSS (Cascading Style Sheets - a programming or style sheet language that gives the content on our site its appearance, e.g. the colour representation of individual words or paragraphs), are stored in the cache for 24 hours. The font files themselves are, according to Google, stored in the cache for one year.

You can find more detailed information on the storing of data and on Google Webfonts at the following link: https://developers.google.com/fonts/faq. Further information on the use of data by Google is available here: https://policies.google.com/privacy?hl=de.
If your browser does not support Google Web Fonts or if access is denied, the content will be displayed in a standard font that is stored on the device you are using.

Use of Google reCaptcha (Art. 6, para. 1, section 1, point f, EU-GDPR)

We use Google reCaptcha to determine whether it is a human being or a computer that has made a specific entry into our registration form. Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) is the provider.

Google uses the following data to determine whether you are a human being or a computer: IP address of the device used, which of our webpages you visit and on which the captcha is integrated, the date and duration of your visit, the recognition data of the browser and operating system type used, the Google account if you are logged in at Google, mouse movements on the reCaptcha areas.

The legal foundation for the described data processing is art. 6, para. 1, point f of the EU-GDPR. We have a prevailing legitimate interest in using this tool to ensure the security of our websites, to protect ourselves from automated entries (such as bot attacks) and to ensure that it is used exclusively for private, non-commercial purposes by human users.
You can find further information on Google reCaptcha as well as Google's privacy policy at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Tag Manager

Our website uses Google Tag Manager. Using Google Tag Manager, website tags can be managed on one platform. The Google Tag Manager tool itself is a cookie-free domain. This means no cookies are placed and no personal data is collected. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access these data. If a deactivation has taken place, whether on a domain or cookie level, this will apply for all tracking tags, as long as these are implemented with Google Tag Manager

User profiles / Web-tracking procedures

Use of Google Analytics (Article 6(1)(a) EU-GDPR)
We use the tracking tool Google Analytics from Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland on our website.
Google Analytics uses so-called “cookies”, which are text files saved on your computer to help the website analyse how users use the site, upon on your consent (Art. 6, para. 1, point a EU-GDPR). The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
If IP anonymisation is active on this website, Google will truncate your IP address within member states of the European Union as well as in other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider. Google will not associate the IP address transmitted from your browser within Google Analytics with any other data held by Google.
The legal basis for the processing of your personal data is based on your consent according to Art. 6, para. 1, letter a of the EU-GDPR. You can revoke your consent at any time via the data protection settings in the lower left-hand corner of every page of our website.
The purpose of processing your personal data by the Google Analytics service is to analyse the interaction of our website visitors with our website. By evaluating the data obtained here, we can optimise our offer and increase user-friendliness.
We delete or anonymise the data collected by Google Analytics as soon as they are no longer required for our purposes. This occurs after 26 months.

GA Audience (Article 6(1)(a) EU-GDPR)
Our website uses GA Audience, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter GA Audience).
GA Audience uses cookies, among other things, which are saved on your computer and any other mobile devices (e.g. smartphones, tablets etc.) to aid in the analysis of how these devices are used, upon on your consent (Art. 6, para. 1, point a EU-GDPR). Your data, e.g. your IP address, are partly evaluated across devices. Google Audience will have access to the cookies created through the use of Google AdWords and Google Analytics. As part of the scope of use, data, such as the IP address and activities of the user in particular, may be transmitted to a server of Google Inc. and stored there. Google Inc. will in some cases also transmit this information to third parties, insofar as this is legally required or if third parties process these data.
You can revoke your consent at any time via the data protection settings in the lower left-hand corner of every page of our website.
Furthermore, you can prevent Google's collection of data generated by cookies and related to your use of the website (incl. your IP address), as well as the processing of said data by Google, by downloading and installing the browser plug-in available under the following link: (http://tools.google.com/dlpage/gaoptout?hl=de).
For more information on data protection when using GA Audience, click on the link below:
https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283
Google Ads Dynamic Remarketing (Art. 6 para. 1 point a EU-GDPR)

On our website we use the remarketing or "similar target groups" function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This use is for the purposes of analysing visitor behaviour and visitor interests. Google uses cookies to analyse website usage. This forms the basis for the creation of interest-related advertisements.
After your consent is provided (Art. 6 para. 1 point a EU-GDPR) cookies are used to record visits to the website and personal data on the use of the website (e.g. IP address, device identification, usage data).
If you visit any other site on the Google Display Network below, you'll see ads that most likely include previously viewed products and information. Your data may be transmitted to the USA if necessary. Google is certified under the US-EU Privacy Shield Agreement, having thereby committed to complying with European data protection guidelines. The data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6 para. 1 point. a GDPR.
You can revoke consent at any time via the data protection settings in the lower left-hand corner of every page of our website. Further information about Google Remarketing as well as the corresponding privacy policy can be found at: https://www.google.com/privacy/ads/
Use of Google Ad Conversion Tracking (Art. 6(1)(a) EU-GDPR)

We use the online advertising program "Google Ads" on our website and, as part of this, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), the party responsible for your data.
When you click on an ad placed by Google, a cookie is placed on your computer for conversion tracking purposes on the basis of your consent (Art. 6 para. 1 point a EU-GDPR).
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. For this purpose, certain personal data such as your IP address or certain device information is collected. Every Google Ads customer receives a different cookie. This means there is no way that cookies can be tracked through the websites of Ads customers. The information collected using the "conversion cookie" is used to compile conversion statistics. This tells us the total number of users who clicked on one of our ads and were directed to a page with a conversion tracking tag.
Your data may be transmitted to the USA if necessary. Google is certified under the US-EU "Privacy Shield", having thereby committed to complying with European data protection guidelines.
The data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6 para. 1 point. a GDPR. You can revoke consent at any time via the data protection settings in the lower left-hand corner of every page of our website. You can find more information as well as Google's privacy policy at: https://www.google.de/policies/privacy/
Google AdService (Art. 6 para. 1 point a EU-GDPR)
Finally, it is possible that Google Adservices, another tool from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) may be used on our websites if you provide your consent (Art. 6 (1) (a) EU-GDPR). This tool allows us to analyse what happens after a user clicks on our ad, such as whether the user has purchased our product, viewed the ad from a mobile phone, or downloaded our app, to improve our content. Google Adservices also uses cookies on the basis of your consent, Art. 6 para. 1 point a EU-GDPR, which are stored on your device, and collects personal data such as IP addresses for the aforementioned purpose.
You can revoke consent at any time via the data protection settings in the lower left-hand corner of every page of our website. You can find more information and Google's privacy policy at: https://www.google.com/intl/en/policies/privacy

Double-Click (Art. 6 para. 1 point a EU-GDPR)
We use Doubleclick from Google on this website. Doubleclick is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Based on your consent (Art. 6 para. 1 point a EU-GDPR), Doubleclick uses cookies to place advertisements tailored to your needs. A pseudonymised identification number is assigned to your browser and this is used to check which ads have been displayed and/or accessed. Doubleclick cookies enables Google and its partners to serve ads based on previous visits to websites on the Internet. The information obtained in this way is transferred to Google servers in the USA and stored there for evaluation purposes. If IP anonymisation is active on this website, Google will truncate your IP address within member states of the European Union as well as in other parties to the Agreement on the European Economic Area. A transfer to third parties will only take place on the basis of legal regulations or within the framework of an order data processing relationship. Consolidation of the data with other data collected by Google does not take place at any time.
The legal basis of the data processing is your consent pursuant to Art. 6 para. 1 point a EU-GDPR. You can revoke your consent at any time via the data protection settings in the lower left-hand corner of every page of our website.
We delete or anonymise the data collected by Google Analytics as soon as they are no longer required for our purposes. This occurs after 14 months.

Use of Facebook Custom Audiences (Art. 6, para. 1, point a EU-GDPR)
This website uses the remarketing function "Custom Audiences" which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
As soon as you visit WAREMA's website and provide your express consent (Art. 6, para. 1, point a EU-GDPR), your IP address is encrypted (hashed) and sent to Facebook (USA). The basis for the processing of your personal data is therefore Art. 6, para. 1, point a, letter a of the EU-GDPR. This hashed IP address is assigned by Facebook to your personal user account. Once you have logged in to Facebook with your account, Facebook will display an ad for our products, campaigns or promotions.
For this purpose, the remarketing tag of Facebook has been implemented on this website.
You can revoke your consent at any time effective for the future via the data protection settings in the lower left-hand corner of every page of our website.
Further information on the collection and use of data by Facebook as well as on your rights and options for protecting your privacy can be found in the Facebook privacy policy at https://www.facebook.com/about/privacy/.
But Facebook is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. Facebook thus undertakes to comply with EU data protection standards.

Google Maps (Art. 6, para. 1, point a, EU-GDPR)
On our website we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on the basis of your consent according to Art. 6, para. 1, section 1, point a of the EU-GDPR. Google Maps is a web service for displaying interactive maps in order to visually present geographical information. By using this service, our location will be displayed and it will be easier for you to make contact with us.
As soon as you access the subpages into which the Google Maps map is integrated, if you give us your consent for the integration of Google Maps via the Consent Banner, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account which you are logged in from or whether no user account exists. If you are logged into Google, your data are directly associated with your account. Google Maps is implemented on our part via the content banner, so that data collection is only possible once you have given your consent for the integration of Google Maps maps. If you do not wish your profile to be associated with Google, you must log out before giving your consent and accessing a corresponding subpage with Google Maps map. Google stores your data (even for users who are not logged in) as user profiles and evaluates them.

An evaluation of this type is carried out in accordance with Art. 6 para. 1 sentence 1 point a EU-GDPR on the basis of your consent. Google uses the data to display personalised advertising, market research and/or to design its website according to your needs. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield" https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, which guarantees compliance with the level of data protection applicable in the EU.

If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, there is also the possibility to completely deactivate the web service of Google Maps by switching off the application JavaScript in your browser. Google Maps and thus also the map display on this website cannot be used.

You can view Google's terms of use at: https://www.google.de/intl/de/policies/terms/regional. The additional terms of use for Google Maps can be found at: https://www.google.com/intl/de_US/help/terms_maps
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy
You have the option to revoke your consent at any time with effect for the future, by granting the appropriate consent in the Consent Banner. Please note that revocation of consent must be made separately for each device.

Usage of videos from YouTube

Our website uses plugins for YouTube, a website operated by Google. The operator of the webpages is YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA. If you visit one of our pages, which is equipped with a YouTube plugin, a connection with the YouTube servers is established. In this case, which of our webpages you have visited is communicated to the YouTube server.
If you are logged into your YouTube account, you enable YouTube to assign your surfing habits directly to your personal profile. You can prevent this by logging out of your YouTube account.
You can find more information about the handling of user data in YouTube's data privacy statement at: https://www.google.com/intl/en/policies/privacy

Facebook Connect (Art. 6 para.1 point a EU-GDPR)

If you have a Facebook profile, you can use the social plugin "Facebook Connect" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), to register with our portals. The social plugins of "Facebook Connect" on our website are recognisable by the blue button with the Facebook logo and the inscription "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook".
Only when the button is activated does your browser establish a connection to the Facebook servers. The content of the Plugin is transmitted to your browser directly from Facebook and integrated into the web page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
These data processing operations are carried out in accordance with Art. 6 para. 1 point a GDPR.
By using this "Facebook Connect" button on our website, you also have the opportunity to log in or register on our website using your Facebook user data. Only if you give your express consent in accordance with Art. 6 para. 1 point a GDPR prior to the registration process on the basis of corresponding information on the exchange of data with Facebook will we receive the general and publicly accessible information stored in your profile when you use the "Facebook Connect" button on Facebook, depending on your personal data protection settings on Facebook. This information includes user ID, name, profile picture, age and gender.
We would like to point out that following changes to the Facebook Privacy Policy and Terms of Use, when you provide your consent, your profile pictures, your friends' user IDs and your friends list may also be transmitted if they have been marked as "public" in your privacy settings on Facebook. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary data, if you have given your consent on Facebook (title, first name, last name, address data, country, e-mail address, date of birth). Conversely, data (e.g. information on your browsing behavior) can be transferred from us to your Facebook profile based on your consent.
The consent provided can be revoked at any time by emailing datenschutz@warema.de.
Facebook Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.
The purpose and extent of the data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for the protection of your privacy, can be found in Facebook's privacy policies: http://www.facebook.com/policy.php
If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent Facebook plugins from loading using add-ons for your browser, e.g. "Adblock Plus" (https://adblockplus.org/de/).

Social Plugins for Social Networks

WAREMA does not currently use any social plugins on its website.

Social Media Links
On our website you will find links to the social media services Facebook, Instagram, Twitter, YouTube, Pinterest and Instagram. Links to the websites of the social media services will be recognisable by the respective company logo. If you follow these links, you will reach the WAREMA company page on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example:

Address of the website where the activated link is found
Date and time that the website was accessed or the link was activated
Information about the browser and operating system used
IP address

If you are already logged in to the corresponding social media service at the time the link is activated, the social media service provider may be able to determine your user name and possibly even your real name from the data transmitted and assign this information to your personal user account with the social media service. You can exclude the possibility of having this information assigned to your personal user account by logging out of your user account beforehand.
The servers of the social media services are in the USA and other countries outside of the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws which generally do not protect personal data to the same extent as is the case in the member states of the European Union.
Please note that we have no influence on the scope, type and purpose of data processing by the social media service provider. Further information on the use of your data by the social media services integrated on our website can be found in the privacy policy of the respective social media service.

Storage period / Criteria for determining the duration

WAREMA Renkhoff SE processes and saves your personal data only for the period of time required to achieve the respective purpose of processing or for as long as there is a legal retention period (particularly commercial and fiscal) or for as long as you have a user account with WAREMA. Once the purpose is achieved, the retention period has elapsed or the user account with WAREMA is deleted, the corresponding data are erased as a matter of routine.

Transmission to third countries / Intention of transmission to third countries

Data transfer to third countries (outside the European Union or European Economic Area) shall only take place if this is required to fulfill a legal obligation, is mandated by law or if you have provided your consent for this.

We do not share your personal data with service providers or companies outside of the European Economic Area.

Secure transmission of your data

In order to best protect the data saved in our system against accidental or intentional tampering, loss, destruction or access by authorised persons, we use appropriate technical and organisation security measures. The security levels are continuously monitored in collaboration with security experts and adjusted to meet new security standards.

The data exchange from and to our website is encrypted in both directions. We offer HTTPS as the transmission protocol for our website, while using the current encryption protocols in each instance.

In addition there is also of course the option of using alternative methods of communication (e.g. mail).

Obligation to provide data

Various personal data are necessary to establish, execute and terminate the contractual relationship and to fulfil the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

In certain cases, data must also be collected and/or made available based on legal regulations. Please note that the processing of your request and the execution of the underlying contractual relationship is not possible unless these data are provided.

Online offers for children

Children and people under the age of 16 are not permitted to transmit personal data or grant consent to us without the approval of their legal guardians (generally the parents). We would like to ask that parents and guardians actively participate in the online activities and interests of their children.

Links to other providers

Our website also contains - clearly visible - links to the websites of other companies. If and when there are links to websites of other providers, we have no influence over their contents. The respective provider or operator of the websites is responsible for their contents. The linked sites were checked for potential legal violations and identifiable legal infringements when the link was established. No unlawful content could be identified at the time when the link was established. However constantly reviewing the content of the linked sites is unreasonable without concrete indications of a legal infringement. Links of this kind will be removed immediately when WAREMA is made aware of legal infringements.

Data subject rights / Other questions?

Under the legal preconditions, you have the right of free-of-charge access to your data, as well as a right to rectification, restriction of processing and erasure of your data, as long as there are no statutory retention periods to oppose them. In addition you can object to data processing, assert your right to data portability or lodge a complaint against data processing with the responsible supervisory authority for data privacy.

If you have given us consent for data processing, you may of course revoke it with effect for the future without stating any reasons.

If necessary you can also contact our data protection officer, who will be happy to answer your questions: datenschutz@warema.de

Final note

Your trust is important to us. For this reason, we want to be fully available to answer questions concerning the processing of your personal data. Should you have any questions that cannot be answered by the data privacy policy outlined above, or if you would like more detailed information in regards to a particular item, feel free to contact the data protection officer at any time by sending an e-mail to the following address: datenschutz@warema.de.

Innovation from tradition
The history of the WAREMA Group

The WAREMA Divisions and Brands
At a glance

Devoted and sustainable
Responsibility for people, society and the environment

Working at WAREMA
Career with the
SunLight Manager

Comprehensive and competent:
Our service for journalists

WAREMA
Renkhoff SE

Legal Details & Data Privacy

Responsible for the content

Executive Board

Supervisory Board

Register Court

Chamber of Crafts and Trades

VAT registration no.

Social networks

General legal information

WAREMA Renkhoff SE

Data privacy at WAREMA

Note on data protection in social media networks