RHEWA-WAAGENFABRIK August Freudewald GmbH & Co. KG would like to thank you for your interest in our website and make your stay here as pleasant as possible. Protecting your privacy is very important to us.
Our primary task is to treat your personal data confidentially and protect it from unauthorised access. We therefore apply extreme care and state-of-the-art security standards to guarantee maximum protection of your personal data. We have taken technical and organisational steps to ensure compliance with the data protection regulations by us and our external service providers.
Our offering is generally aimed at adults. Children under 16 should not submit any personal data to us without the consent of a parent or guardian.
Below, we therefore explain how we handle your personal data and what your rights are in this respect.
1. Personal data
'Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
3. Restriction of processing
‘Restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future.
‘Profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
6. Filing system
‘Filing system’ means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.
'Controller' means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law (Official Journal of the European Union, L 119/33, 4 May 2016) shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
10. Third party
‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
B. Controlling body/Data protection officer
For the processing of your personal data in connection with this web presence, we are "controllers" within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR).
You can contact us as follows:
RHEWA-WAAGENFABRIK August Freudewald GmbH & Co. KG
Tel. +49 2104/14020
Email: p.freudewald@ rhewa. com
Our authorised representative/general manager is Peter Freudewald.
Our data protection officer can be contacted by sending an email to: a.schneider(at)rhewa(dot)com
C. Type and scope of data processing
1. Processing access data
You can visit our Website without having to provide personal information. Where the site is used for information purposes only, we store only the following access data in server log files:
Time and date of the request
Time zone difference between local time and Greenwich Mean Time (GMT)
Content requested (specific page)
Access status/HTTP status code
Website making the request
Operating system and its interface
Browser language and version
This data is collected solely for the purpose of ensuring the troublefree operation of the Website and evaluated for this purpose only.
The IP address can constitute personal data because under certain conditions it allows the identity of the owner of the internet access used to be determined via submission of an additional request to the relevant internet service provider.
In addition to the aforementioned purposes, we also analyse the IP address in the event of an attack on our internet infrastructure. In these cases, we have a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR in processing the IP address. This legitimate interest arises from the need to ward off attacks on our internet infrastructure, to identify the source of the attack for the purpose of bringing proceedings under criminal and civil law against the person responsible, to effectively prevent further attacks and to operate the Website free from disruption.
The IP address will be deleted if we can rule out the possibility of an attack taking place on our internet infrastructure. This is done regularly after 30 days.
2. Processing data when dealing with your requests
We only collect the data you voluntarily submit when you establish contact with us.
In this connection, we offer you the opportunity to contact a member of our staff by email or to use our contact form.
We process the following data when you use the contact form:
The content of your message to us
You also have the option of giving us the following additional data:
Title, first name and last name
Street, postcode and place
All the aforementioned data is processed solely for this correspondence with you and for the purpose for which you gave us the data as part of this communication, such as processing your request or contacting you at your request. In this case, the personal data is processed with your consent in compliance with Art. 6(1)(a) GDPR. Where processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract, it is done on the basis of Art. 6(1)(b) GDPR.
Once your request has been dealt with, your data will be restricted from further use and deleted, on expiry of the statutory retention periods, unless you have explicitly consented to the continued use of your data or we are otherwise entitled to store this data.
3. Processing data relating to job applicants
Our Website includes a "Jobs" section where you can apply for a job via email.
In this connection, the following data is collected from you:
Title, first name and last name
Additional information and documents, such as the covering letter, curriculum vitae and references you make available to us
We use your data solely for the purpose of assessing your suitability for employment. Internally, your application is forwarded only to the persons responsible for deciding who will be offered the job. If you submit a speculative application rather than one for a specific position, we will use your data for all vacancies that correspond with your requirements at the time you apply.
We are entitled to process this data pursuant to Art. 88 GDPR in conjunction with Section 26(1)(1) of the German Data Protection Act (BDSG).
Your data will be deleted on completion of the recruitment process and a retention period of six months, unless you consent to it being stored for a longer period.
4. Cookie use
We use various cookies on this Website for statistical analysis purposes.
Cookies are small text files sent to your hard drive which identify your browser and send certain information to the party that has placed them. Cookies cannot execute programmes or transfer viruses to your computer. Their purpose is to make the web offering more user-friendly and effective as a whole.
We use transient cookies, and in particular session cookies. These cookies store what is known as a session ID, which is used to assign different requests from your browser to a common session. This allows us to identify your computer the next time you visit our Website. Session cookies are deleted automatically when you log out or close your browser.
We use persistent cookies. They are deleted automatically at the end of a set period, which can vary depending on the cookie. Persistent cookies can be deleted in your browser's security settings at any time.
You can prevent the use of HTML5 storage objects by selecting privacy mode or incognito mode in your browser.
As a user, you can control the extent to which cookies are used by restricting or disabling them in your browser settings. Previously saved cookies can be deleted at any time.
Restricting or disabling cookies may make it impossible to use parts of our Website.
5. Use of Matomo (formerly Piwik)
We use the web analytics service Matomo to analyse and continuously improve the use of our Website. To this end, cookies are stored on your computer for a maximum of 30 days. We use Matomo with the AnonymizeIP function. This will shorten the IP address before processing, making it impossible to directly identify the person accessing the Website. The IP addresses are not collated with any other data we collect.
The statistics we gather help us to improve our offering and make it more interesting for you as a user, which means we can claim a legitimate interest. The legislative basis for the use of Matomo is therefore Art. 6(1)(f) GDPR.
You can opt out of anonymised data collection by Matomo at any time by unchecking the following box here to enable the opt-out plug-in.
Matomo is an open-source project. Information on data protection from this third party can be obtained from https://matomo.org/privacy-policy/
6. Use of Google Maps
We use Google Maps on our Website to display maps and provide you with directions to locations. Google Maps is a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View CA 94043 USA.
Google LLC is an EU-US Privacy Shield certified company, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. It thus guarantees compliance with the GDPR requirements when processing data in the USA.
When you visit the Website, Google is notified that you have accessed the corresponding subpage of our Website. The data collected during your visit is also transferred. This is done irrespective of whether Google provides a user account that you are logged in to or not. When you sign in to Google, your data is associated directly with your account. If you don't want Google to match your online activitiy with your profile, you should sign out before activating the button. Google saves your data in your personal profile and uses it for the purposes of advertising, market research and/or customising its website. This is done in order to serve tailored adverts (even if you are not signed in) and inform other users of the social network of your activities on our Website. You have the right to object to the formation of this personal profile; to exercise this right, you will need to contact Google.
Every time you access a page containing a Google Map, Google sets a cookie that is not deleted simply by closing your browser but only on expiry of a certain time period. You can, however, delete cookies manually via your browser settings or disable Google Maps services. In the latter case, your use of the service may be limited or not possible.
The legislative basis for this is Art. 6(1)(f) GDPR, as we have a legitimate interest in improving the user and customer experience on our Website and
Google's additional Terms of Service also apply when using Google Maps. They can be accessed at:
We offer RHEWA dealers the opportunity to create a user account on our Website.
For this purpose, we collect the following mandatory data:
Title, first name and last name
You can also volunteer the following information:
Telephone number (landline/mobile)
Processing of your data is necessary for the performance of a contract or in order to take steps prior to entering into a contract and is therefore based on Art. 6(1)(b) GDPR. Your user account can be terminated at any time on request. The processed data will be deleted on expiry of the statutory retention periods. Any data not stored by you will then be lost.
8. Service request
Service requests can be submitted via our Website. For this purpose, we collect the following mandatory data:
Title, surname and first name
Street, postcode and place
You can also volunteer the following information:
Processing of your data is necessary for the performance of a contract or in order to take steps prior to entering into a contract and is therefore based on Art. 6(1)(b) GDPR. The processed data will then be deleted on expiry of the statutory retention periods.
9. Transfer to third parties
We sometimes make use of external service providers for processing your data. They are selected and appointed with great care, obliged to follow our instructions and checked on a regular basis. Categories of recipient are as follows:
IT service providers
We may pass your personal data to third parties in the event that we offer services together with partners such as participation in promotions and competitions or conclusion of contracts, etc.. Further information is provided when you release your personal data or in the offer description.
Where our service providers or partners are headquartered in a state outside the European Economic Area (EEA), you will be informed of the consequences of this situation in the offer description.
D. Your rights
You have the following rights in connection with our processing of your personal data. You can exercise these rights free of charge. Where requests relating to the rights at 2. to 6. are manifestly unfounded or – in particular because of their repetitive character – excessive, we may, in accordance with Art. 12(5) GDPR, either:
charge a reasonable fee, taking into account the administrative costs of providing the information or communication or taking the action requested or
refuse to act on the request.
1. Withdrawal of consent
You have the right to withdraw consent for the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal, however.
2. Confirmation and information
You are entitled to request confirmation whether personal data concerning you is being processed. Where that is the case, you have the right to obtain the information set forth in Art. 15 GDPR.
3. Rectification and erasure
You have the right to request the rectification of inaccurate personal data and to have incomplete data completed (Art. 16 GDPR) and, under the conditions set forth in Art. 17 GDPR, the erasure of your personal data.
4. Restriction of processing
You have the right to restrict the processing of personal data under the conditions set forth in Art. 18 GDPR.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, where this is based on point (e) or (f) of Article 6(1) GDPR. We will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if processing is for the establishment, exercise or defence of legal claims.
6. Release of data and data portability
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller at your request, where technically feasible.
The right to transmit this data exists only to the extent that the processing is based on consent pursuant to point (a) of Art. 6(1) GDPR or on a contract pursuant to point (b) of Art. 6(1) GDPR and the processing is carried out by automated means. This right is excluded if it adversely affects the rights and freedoms of others (in particular personal data of third parties, commercially sensitive information held by RHEWA, copyrights).
E. Obligation to provide data
F. Right to lodge a complaint
Should you be of the opinion that we are not meeting our obligations under data protection legislation, you may contact the data protection authorities at any time.
The responsible authority is:
State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia
PO Box 20044
Tel.: +49 211/384240
Fax: +49 211/3842410
Email: firstname.lastname@example.org. de
Last updated: June 2018