Privacy Policy
Name and adress of Controller
Controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the member states as well as other data protection regulations is:
RIYF UG
Buchenweg 4
04668 Parthenstein
Represented by:
Robin Jung
Contact:
E-Mail: info@riyf.de
Basic information
This privacy policy is intended to inform users of this website about the nature, scope and purpose of the collection and use of personal data by the website operator RIYF.
The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory provisions. As new technologies and the constant further development of this website may result in changes to this data protection declaration, we recommend that you read the data protection declaration again at regular intervals.
Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.
Access data
a) Description and scope of data processing
We, the website operator or page provider, collect data on access to the website on the basis of our legitimate interest (see Art. 6 Para. 1 lit. f. GDPR) and store this data as “server log files” on the website server. The following data are logged in this way:
- Visited website link
- Local time at the time of access
- Quantity of data sent in bytes
- Source/reference from which you accessed the site
- Used Browser
- Operating system used
- IP address used
b) Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
c) Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session
Storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. In this context, no evaluation of the data for marketing purposes does take place.
These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.
d) Duration of the storage
The server log files are saved for a maximum of 7 days and will then be deleted. The data is stored for security reasons, e.g. to be able to clarify potential cases of abuse. If data must be kept for reasons of evidence, these are excluded from deletion until the incident has been finally clarified.
Range measurement & Cookies
a) Description and scope of data processing
This website uses cookies only for necessary purposes for its necessary functions e.g. session-cookie or login-cookie .
When accessing our website, the user is informed about the use of cookies for necessary purposes and his consent to the processing of personal data used in this context. Reference is also made to this privacy policy.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
c) Purpose of data processing
Cookies are used to deliver the necessary functionalities of our website and its contents.
d) Duration of storage/possibility to object
Cookies are stored on the user’s computer and transmitted by the user to our site. Therefore you as a user have full control over the use of cookies. If you do not want cookies to be stored on your end device for range measurement, you can object to the use of these files here:
- Cookie deactivation page of the network advertising initiative:http://optout.networkadvertising.org/?c=1#!/
- Cookie deactivation page of the US website:http://optout.aboutads.info/?c=2#!/
- Cookie deactivation page of the European website:http://optout.networkadvertising.org/?c=1#!/
Common browsers offer the setting option not to allow cookies. Note: It is not guaranteed that you will be able to access all functions of this website without restrictions if you make the appropriate settings.
e) Please click the link below to view the Cookie notice.
Collection and processing of personal data
a) Description and scope of data processing
The website operator collects, uses and passes on your personal data only if this is permitted by law or if you consent to the collection of data.
Personal data is all information that serves to determine your natural person and which can be traced back to you – for example your name, your e-mail address and telephone number.
You can also visit this website without providing any personal information. However, to improve our online offer, we store (without personal reference) your access data to this website. These access data include, for example, the file you requested or the name of your Internet provider. By making the data anonymous, it is not possible to draw conclusions about your natural person.
b) Legal basis for data processing
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 letter b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
c) Duration of storage and deletion of data
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. Blocking or erasure of data is also carried out when a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.
Handling of contact data
a) Description and scope of data processing
If you contact us as the website operator through the contact options offered, your details will be stored so that they can be used to process and answer your enquiry. This data will not be passed on to third parties without your consent.
b) Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6, Paragraph 1, lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
c) Purpose of data processing
The processing of personal data serves us solely to process the contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
d) Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be concluded from the circumstances that the matter in question has been conclusively clarified.
Any additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Rights of the user
In accordance with Art. 15 GDPR, as a user you have the right to obtain free information on request about which of your personal data has been processed. You also have the right to have incorrect data corrected in accordance with Art. 16 GDPR, to have your personal data deleted in accordance with Art. 17 GDPR and to restrict processing in accordance with Art. 18 GDPR. If applicable, you can also exercise your right to data portability in accordance with Art. 20 GDPR. The right of information and the right of deletion are subject to the restrictions set out in §§ 34 and 35 BDSG. Should you assume that your data has been processed unlawfully, you can lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR and § 19 BDSG
Deletion of data, Art. 17 GDPR
Unless your request conflicts with a legal obligation to retain data (e.g. data retention), you have the right to have your data erased. Data stored by us will be erased if they are no longer required for their intended purpose and if there are no statutory retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case the data will be blocked and not processed for other purposes.
The right of cancellation therefore does not exist insofar as the processing is necessary
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 para. 2 and 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 para. 1 GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defence of legal claims.
Right of objection
Users of this website may exercise their right to object and object to the processing of their personal data at any time. The person responsible will no longer process the personal data concerning you, unless he/she can demonstrate compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.