Knowledge Center
  1. Home
  2. Documentation
  3. Privacy Policy

Privacy Policy

Name and Address of Controller

The Controller as defined in the General Data Protection Regulation (GDPR) and other data protection regulations is:

retarus GmbH
Aschauer Strasse 30
81549 Munich
Germany

Tel.: +49 89 5528 0000
Website: www.retarus.com

Contact details of the Data Protection Officer

You can reach our Data Protection Officer either at the postal address of the controller or using the following contact details:

Tel.: +49 89 5528 0000
Email: dataprivacy@retarus.com

General Information on Data Processing
  • Insofar as we obtain the data subject’s consent for the processing of personal data, the legal basis is as provided by point (a) of Art. 6(1) GDPR.
  • Where processing of personal data is required for the performance of a contract to which the data subject is a contracting party, the legal basis is as provided by point (b) of Art. 6(1) GDPR. This also applies to processing required to implement measures prior to entering into a contract.
  • Where processing of personal data is required to meet a legal obligation to which our company is subject, the legal basis is as provided by point (c) of Art. 6(1) GDPR.
  • Where the processing of personal data is necessary to protect an interest, which is essential to the life of the data subject or that of another natural person, the legal basis is as provided by point (d) of Art. 6(1) GDPR.
  • Where the processing is required to uphold a legitimate interest of our company or a third party, and the data subject’s interests, fundamental rights and freedoms do not outweigh the aforementioned interest, the legal basis for the processing is as provided by point (f) of Art. 6(1) GDPR.
2. Erasure of data and retention periods

The data subject’s personal data shall be erased or made unavailable when the purpose of retention no longer applies. Data may also be retained where stipulated by European or national legislation in EU regulations, laws or other requirements to which the Controller is subject. Data shall also be made unavailable or erased where a retention period stipulated by the standards referred to above expires, unless further retention of the data is necessary to conclude or fulfill a contract.

Data Subjects’ Rights

If your personal data is processed, you are a Data Subject as defined in the GDPR and you have the following rights:

  • Right of access (Art. 15 GDPR): You can obtain from us confirmation as to whether or not personal data concerning you is being processed by us. Where that is the case, you can obtain from us access to the following information: the purposes of the processing; the categories of personal data concerned; the categories of recipients to whom your personal data has been or will be disclosed; the envisaged period for which the personal data will be stored; the existence of the right to rectification, erasure, restriction of processing or to object to such processing; the existence of the right to lodge a complaint; the source of your data if it is not collected by us; the existence of automated decision-making, including profiling and if applicable, meaningful information about its details.
  • Right to rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you rectified, or to have incomplete personal data completed.
  • Right to erasure (Art. 17 GDPR): You can obtain from us the erasure of your personal data stored by us, where one of the following grounds applies: the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent and there is no other legal ground for the processing; you object to the processing pursuant to Articles 21(1) or 21(2) GDPR; the personal data has been unlawfully processed; the personal data must to be erased to comply with a legal obligation to which the Controller is subject; the personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
  • Right to restriction of processing (Art. 18 GDPR): You can obtain from us restriction of processing of the personal data concerning you where the conditions listed in Art. 18(1) GDPR apply. Where processing has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
  • Right to notification (Art. 19 GDPR): Where you have exercised your right to rectification or erasure of personal data, or restriction of processing, we are obliged to communicate this rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability (Art. 20 GDPR): You have the right (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and (ii) to transmit those data to another Controller without hindrance from us, where the processing is based on consent (point (a) of Art. 6 (1) or point (a) of Art. 9 (2) GDPR) or on a contract (point (b) of Article 6(1) GDPR) and processing is carried out by automated means.
  • Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We shall no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or if processing is used for the establishment, exercise, or defense of legal claims. Where the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means that use technical specifications.
  • Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw your data use consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Subject to the conditions set out in Art. 22 GDPR, you have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  • Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes on the GDPR.

Cookies

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

Google uses cookies . The information generated by the cookie about your use of this website is transmitted and stored by a Google server in the USA. Google will use this information on our behalf to analyze users’ use of the website, compile reports on website activities and provide additional services to the website operator in connection with use of the website and Internet usage.

We use Google Analytics only with IP anonymization activated. This means that users’ IP addresses will be truncated by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. The IP address that is transmitted by the user’s browser is not merged with other data held by Google.

You can prevent these cookies from being stored by enabling the relevant setting in your browser software. Please note, however, that this may prevent you from using all the functions available on this website. In addition, you can prevent the information about your use of the website that is generated by the cookie (including your IP address) from being passed on to Google and from being processed by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=de .

You can prevent your data from being tracked by Google Analytics by clicking on the following link. An opt-out cookie is set, which will prevent your data from being collected during future visits to this website: Disable Google Analytics.

More information on how Google uses data for advertising purposes, settings, and declining consent options is available on Google’s websites:

More information on how use data is handled by Google Analytics is available in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

This website uses Google Analytics reports on demographic features based on data from interest-based Google ads as well as third-party visitor data (for example, age, gender and interests). This data cannot be used to identify a specific person and can be disabled at any time in the display settings.

We also use Google Analytics to analyze data from Google Adwords for statistical purposes. If you prefer, you can disable this function via the Ads Preference Manager (https://www.google.de/settings/ads ).

Google Tag Manager

This website uses Google Tag Manager. This service allows website tags to be managed using an interface. Google Tag Manager implements tags only. No personal data is recorded. Google Tag Manager triggers other tags which, in turn, may record data. Google Tag Manager does not access this data. If disabled at domain or cookie level, this setting still applies to all tracking tags provided that they are implemented using Google Tag Manager.

← WebExpress - List Import API
Developer Documentation →