Data-protection notice and declaration of consent


The protection of your personal data is very important to us. You will find information about the handling of your data that is collected in the following. Your data is processed in accordance with the legal regulations.

1. Data controller

The data controller for the data processing in terms of the data-protection law is:

RAMPA GmbH & Co. KG (hereinafter referred to as: “We”, “Us”)
Auf der Heide 8,
D-21514 Büchen
Telephone: +49-4155-8141-0
Fax: +49-4155-8141-80,
E-mail: mail@rampa.com
Internet: www.rampa.com

2. Contact data of the data-protection officer

The data controller’s data-protection officer for the processing of data can be reached at:

Dominik Fünkner
PROLIANCE GmbH
Leopoldstraße 21
80802 München
Telephone: +49-89-217685173
E-mail: datenschutzbeauftragter@datenschutzexperte.de

3. Personal data

Personal data includes any information relating to an identified or identifiable natural person (“data subject”). A data subject who can be identified directly or indirectly, in particular, by means of assignment to an identifier, is regarded as identifiable. For example, a name, an ID number, location data, an online identifier or other special features, the expression of physical, physiological, genetic, psychological, economic, cultural or social identity of this data subject are considered identifiers.

4. Purpose and legal basis of the processing of personal data

We are committed to comply with all data-protection provisions in handling website visitor data. We will process data only to the extent this is necessary and allowed under data-protection law, for example, to make visiting our website possible in order to fulfill contractual purposes or to the extent grant you consent for the processing of data. In particular:

a) Informational use of our website

You can visit our website without having to provide information about yourself. When you use our website solely for informational purposes and do not register, login or transmit personal information in any other way, we do not collect any personal data. An exception entails data that your browser transmits in order for it make it possible for you to visit our website, as well as information that is transmitted via the cookies used by us.

For the purpose of the providing our website on a technical level, it is necessary for us to process automatically transferred personal information so that your browser can display our website and you can use the website. This information is automatically collected each time our website is accessed and saved in our server log files. Here, we collect the following information: Browser type / version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address), date and time of the server request.

These data are deleted after 30 days at the latest. These data are not combined with data from other sources.

In addition, we use cookies to make our website available for use. Cookies are text files that are stored in the Internet browser or saved on your computer by the Internet browser when accessing a website. A cookie contains a characteristic string that enables a clear identification of the browser when you access the website again. We only use these cookies to provide our website along with its technical functions to you. Within the scope of Prestahop, system cookies are used as so-called session cookies or temporary cookies for language, sub-shop, session, shopping cart, login status, cookie opt-out and are automatically deleted after 30 days. Within the scope of Wordpress, system cookies are used as session cookies or temporary cookies for language and cookie- opt-out and are automatically deleted after 30 days.

Almost all browsers make it possible to block cookies in their entirety, to remove existing cookies or warn against cookies in order to prevent that these are placed on your device. For more information concerning this, please consult the documentation or the help file of your browser. Please note that blocking cookies can significantly impair the use of our website. In addition, some features of our website cannot be offered without the use of cookies. Your information that we have collected via the aforementioned cookies necessary on a technical level are not used by us to create a user profile or evaluate your surfing behavior.

We process your personal data for the provision of our website on a technical level in order to protect our legitimate interests in accordance with Article 6 (1) letter f of the GDPR. Our legitimate interest entails being able to provide you with an attractive, technically functional and use-friendly website.

b) When making a request via our contact form

If you have questions of any kind, on the basis of Article 6 (1) letter f of the GDPR, we offer you the possibility to contact our customer service. If you provide us with your personal data, this is done voluntarily. When using our contact form, it is necessary that you share the personal data requested in the respective mandatory fields (e.g. first and last name, company, e-mail address) so that we can process your request. The purpose of collecting personal information is to identify you and to be able to respond to your request. Our legitimate interest lies in our economic interest in being able to establish contact with new potential customers.

The personal data transmitted during requests via the contact form are stored up to the time your request is answered and then deleted unless we are obligated to store the data for a longer period of time due to retention periods.

c) When placing an order

For a product order via our website, your personal data is mandatory required as follows:

Name
E-mail address
Phone number
Website
Sales tax identification number
Billing address (and, if necessary, an alternative delivery address)
Payment data depending on the payment method selected by you (for example, credit card information, bank information or PayPal account information).

We process your data from your order, the course of the contract or data collected during and after the conclusion of contract for the purpose of verifying your order, for justification, processing and possibly modifying your contract of sale, to settle any possible warranty claims, as well as to assert any claims against you, for possible services and for marketing purposes and, within this context, also transmit them to order processors and service providers (these include, for example, service providers from the branches: Transport, logistics and payment services) to the extent

  • this is required for fulfilling the contract (Art. 6 (1) letter b of the GDPR). Data processing is, in particular, required to ensure the completeness and accuracy of the data and to perform the contract;
  • this is required to fulfill a legal obligation (Art. 6 (1) letter c of the GDPR). The data processing is, particular, required to ensure of the completeness and accuracy of tax data according to fiscal code;
  • this is within the scope of your provided voluntarily consent (Article 6 (1) letter a of the GDPR);
  • is necessary to protect legitimate interests of the data controller or a third party (Art. 6 (1) letter f of the GDPR; a legitimate interest is, in particular, our interest in customer loyalty.)

The personal data collected by us for the order are stored up to the expiration of the legal warranty obligations and deleted automatically afterwards, unless we are obligated to store the data for a longer period of time due to retention periods.

Because it is necessary to provide your personal data mentioned above for the conclusion of the contract, not providing this data will result in the contract of sale not materializing.

d) During the creation of a customer account

or each customer who registers, we set up a password-protected direct access to his/her personal data (user account). Here, you can view your completed order data as well as the address data you have specified. You commit to treat the personal access data confidentially and not to make it accessible to any third parties. We shall accept no liability for the misuse of passwords, unless we are responsible for said misuse.

We process your information during your registration base on the following legal grounds:

Within the scope of fulfilling a contract you are a party to or to carry out pre-contractual measures in accordance with Art. 6 (1) letter b of the GDPR;

For the fulfillment of a legal obligation, which we are subject to in accordance with Art. 6 (1) letter c of the GDPR in connection with the commercial, trade or tax law provided that we are obligated to record and store your data.

e) When registering for our newsletter

If you have consented to the sending of the newsletter, we use your personal information (e.g. name and e-mail address) to send you our newsletter on a regular basis.

You are entitled, at any time, to unsubscribe from the marketing messages that we send to you. You may exert this right by clicking on the link “Opt out” or “Unsubscribe” in the promotional emails we send to you. Registered users can manage their account settings, as well as the settings for promotional emails under “Your personal information” and deselect the subscription to the newsletter. If you are not a registered user or want to log off from other marketing channels (for example, from postal advertising or telemarketing), then you can contact us using the contact details given here. Similarly, if we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent neither has an effect on the lawfulness of the processing carried out by us prior to your cancellation nor on the processing of your personal data, which was carried out in reliance on other legal grounds than consent.

We process your data for the sending newsletters and the personalization of the form of address used in communicating with you based on the following legal grounds:

  • Provided that you have granted your consent in accordance with Art. 6 (1) letter a of the GDPR;
  • Unless you have given us your e-mail address in connection with the purchase of goods or services, or we send you personalized advertising to protect our legitimate interests in accordance with Article 6 (1) letter. f of the GDPR in connection with Art. 15 (3) of the Telecommunication Act in connection with Art. 7 (3) of the Law Against Unfair Competition [UWG]; our legitimate interest is based on our economic interests in the implementation of promotional measures and target-group-oriented advertising.

5. Declarations of consent

You give us the following declarations of consent in accordance with Art. 6 (1) letter a of the GDPR, which we will keep record of for you and which you can call up in this document (data-protection declaration and consent to the processing of data).

“Yes, I would like to be informed about products and services of RAMPA GmbH & Co. KG by e-mail. This consent can be withdrawn at any time”.

6. Right of withdrawal and objection

You can revoke all consent for the use of your personal data which you have given to us in full or for individual types of processing free of charge. The legality of the processing that is carried out on the basis of the consent until the withdrawal shall not be affected by the withdrawal.

In accordance with Art. 21 of the GDPR, you have the right to object to the processing of your personal data, which takes place due to our legitimate interest or the legitimate interest of a third party, provided that reasons exist which arise from your special situation or the objection is directed against general direct advertising or direct advertising which is customized for you. In the latter case, you have a general right to object, which we will implement without having to indicate a special situation.

If you would like to exercise your right of revocation or objection, please send us an email to mail@rampa.com or contact the person responsible using another method (see section 1).

7. Disclosure of data to third parties /recipient of the data

Your personal information will only be disclosed to third parties or otherwise transferred if this is required for the purpose of providing our services on the website, to perform the contract, or billing. Within the scope of order processing, for example, the service providers here used by us (transport specialist, logistics specialist, banks, etc.) obtain the necessary data for ordering and order processing. The data shared in this way may only be used by our service providers to fulfill their respective task. Any other use of the information is not permitted and also does not occur in the case of any of the service providers appointed by us.
When paying by credit card your data is forwarded to Concardis GmbH. This forwarding is obligatory for payment processing. Please note the data protection policy by Concardis when paying an order in our Onlineshop: https://www.concardis.com/de-en/protecting-your-data

8. Evaluation visiting activities

Google Conversion Tracking
We use Google Conversion Tracking, an analysis service of Google LLC based on Art. 6 (1) letter f of the GDPR. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). Our legitimate interest entails the analysis, optimization and economic operation of our website. Google AdWords places a cookie on your computer ("conversion cookie"), provided that you arrived at our website via a Google ad. After 30 days, these cookies expire and are not used for personal identification. Should you visit certain pages from our website and the cookie has not yet expired, we and Google will be able to tell that someone clicked on the ad and proceeded to our page. Each Google AdWords customer has a different cookie. This means that cookies cannot be tracked via the website of an AdWords customer. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. AdWords customers can find out the total number of users who have clicked on their ad and been redirected to the page with a conversion tracking tag. However, advertisers do not obtain any information that can be used to personally identify users. Should you not wish to participate in the tracking process, you can also reject the placement of a cookie in this instance by using the browser setting which generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies originating from the domain "googleadservices.com".

Google Ads Remarketing with conversion measurement
Our website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Provided that you have given us your consent, this function makes it possible for the advertising target groups created with Google Ads Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. The legal basis is the consent which you have given in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR. In this way, interest-related, personalized advertising messages which have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. a mobile phone) can also be displayed on another one of your devices (e.g. a tablet or PC).

If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device that you log into with your Google account.

To support this function, Google Analytics collects authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing / targeting by deactivating personalized advertising in your Google account by following this link: https://adssettings.google.com/

Since personal data is transferred to the USA, additional protection mechanisms are required which ensure that the data protection level of the GDPR is provided. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the European protection level. In cases in which this cannot be ensured, even via this contractual extension, we will endeavor to provide additional regulations and commitments from the recipient in the USA.

Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/

As part of Google Ads, we also use Google Conversion Tracking (conversion measurement). Google Conversion Tracking is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Conversional Tracking for marketing and optimization purposes on the basis of the consent which you have previously given (Art. 6 Para. 1 lit. a of the GDPR).

As part of Google Conversion Tracking, cookies are set to track user behavior when a user clicks on or views an advertisement in the Google search or on another website within the Google display network.

These cookies lose their validity after 90 days. In this way, Google Conversion Tracking records whether and to what extent the user carries out pre-defined actions on our website. Rampa has no access to the cookies set by third parties. The information obtained using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who were reached by our ad and therefore performed a defined action on our website. For more information about data protection and how it works, please visit:

https://support.google.com/google-ads/answer/1722022

https://www.google.com/policies/technologies/ads/

---

If the processing of your data is based on consent, you have the right to withdraw the consent at any time with effect for the future.

Google Tag Manager
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed via a user interface. The Google Tag Manager only implements tags. This means: No cookies are used, and only the user's IP address is transmitted to Google to establish the connection. The Google Tag Manager triggers other tags, which in turn can collect data if necessary. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in effect for all tracking tags, insofar as they are implemented with the Google Tag Manager.

We use the Google Tag Manager on the basis of our legitimate interest from Art. 6 Para. 1 lit. f) of the GDPR. Our legitimate interest in this case is to enable the technical integration of other website tools.

Since the IP address is transferred to Google in the USA, other protective mechanisms are required which ensure that the data protection level of the GDPR is provided. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c of the GDPR.

These oblige the recipient of the data in the USA to process the data in accordance with the European protection level. In cases in which this cannot be ensured, even via this contractual extension, we will endeavor to provide additional regulations and commitments from the recipient in the USA.

Google Analytics
Our website uses Google Analytics, an Internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies".

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to produce reports on website activity. Google will also use this information to provide the website operator with other services associated with the use of the website and the Internet. The IP address sent by your browser within the scope of Google Analytics is not combined with other Google data. Processing takes place in accordance with Art. 6 Para. 1 lit. a of the GDPR on the basis of the consent you have given. You have the right to withdraw your consent to the processing of your personal data with effect for the future at any time.

We only use Google Analytics with IP anonymization activated. This means that Google will only process your IP address in abbreviated form.

We have agreed an order processing contract with the service provider in which the provider is obliged to protect the data of our customers and not to pass it on to third parties.

Since personal data is transferred to the USA, additional protection mechanisms are required which ensure that the data protection level of the GDPR is provided. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the European protection level. In cases in which this cannot be ensured, even via this contractual extension, we will endeavor to agree additional regulations and commitments with the recipient in the USA.

The terms of use of Google Analytics and information about data protection can be accessed via the following links: http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/

The data will be deleted as soon as it is no longer required for achieving the purpose for which it was collected. Deletion of the data at user and event level which is linked to cookies, user IDs (e.g. user ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) takes place no later than 14 months after collection.

You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case, you may not be able to use all of the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie, analyzing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plug-in which is available at https://tools.google.com/dlpage/gaoptout?hl=de.

9. YouTube components

On our website we incorporate videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data is the consent which you have given in accordance with Art. 6 Paragraph 1 Clause 1 lit. a of the GDPR. You have the right to withdraw your consent to the processing of your personal data with effect for the future at any time.

If the playback of embedded YouTube videos is started with your consent, the provider "YouTube" uses cookies to collect information about user behavior. According to information from “YouTube”, these are used, to record video statistics, improve user-friendliness and prevent abusive practices, among other things. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. Google stores this data as usage profiles and uses it for advertising, market research and / or requirement-based design of its websites. Evaluation such as this takes place particularly (also for users who are not logged in) for displaying requirement-based advertising and informing other social network users about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly about this.

Since personal data is transferred to the USA, additional protection mechanisms are required which ensure that the data protection level of the GDPR is provided. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 Paragraph 2 lit. c of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the European protection level. In cases in which this cannot be ensured, even via this contractual extension, we will endeavor to provide additional regulations and commitments from the recipient in the USA.

More information about data protection and data usage by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de

10. Cookie-Settings

This website uses cookies.

We use cookies to personalize content and ads and to analyze traffic to our website. We also share information about your use of our website with our partners for and analytics. Our partners may combine this information with other information you have provided to them or that they have collected as part of your use of the Services. You give consent to our cookies when you continue to use our website.

Privacy Policy

Cookies are small text files used by websites to make the user experience more efficient.

By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other cookie types, we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie statement on our site.

Learn more about who we are, how to contact us, and how we process personal data in our Privacy Policy.

Your consent applies to the following domains: www.rampa.com

Your current state: Allow All.
Your consent ID: UZlyqqZRX1sfoM164W3TFoIlCjt+9aIOlVCLla3Pp3/8DR/eJQhUdQ==
Consent date: Friday, 23 September 2022 at 09:58:58 CEST.

Change consent | Revoke consent

Cookie statement was last updated by Cookiebot on 12/01/2013:

Necessary (6)

Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Name Provider Purpose Expiration Type
CONSENT [x2] Google YouTube Used to determine whether the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website's compliance with the GDPR. 2 years HTTP Cookie
CookieConsent Cookiebot Stores the user's consent status for cookies on the current domain. 1 year HTTP Cookie
cookielawinfo-checkbox-necessary www.rampa.com Determines whether the visitor has accepted the cookie consent field. 1 year HTTP Cookie
cookielawinfo-checkbox-non-necessary www.rampa.com Determines whether the visitor has accepted the cookie consent field. 1 year HTTP Cookie
PrestaShop-# www.rampa.com Pending Session HTTP Cookie


Marketing (22)

Marketing cookies are used to follow visitors on websites. The intention is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and advertising third parties.

Name Provider Purpose Expiration Type
_gcl_au Google Used by Google AdSense to experiment with advertising efficiency on websites that use their services. 3 months HTTP Cookie
_uetsid Microsoft Collects data on visitor behavior on multiple websites to present more relevant ads - This also allows the website to limit the number of times the same ad is displayed. 1 day HTML Local Storage
_uetsid_exp Microsoft Contains the expiration date for the cookie with corresponding name. Persistent HTML Local Storage
_uetvid Microsoft Used to track visitors across multiple websites to present relevant advertising based on the visitor's preferences. 1 year HTML Local Storage
_uetvid_exp Microsoft Contains the expiration date for the cookie with corresponding name. Persistent HTML Local Storage
DEVICE_INFO YouTube Used to track user interaction with embedded content. 179 days HTTP Cookie
IDE Google Used by Google DoubleClick to record and report the user's actions on the website after viewing or clicking on one of the provider's ads, with the purpose of measuring the effectiveness of an advertisement and displaying targeted advertisements to the user. 1 year HTTP Cookie
MUID Microsoft Widely used by Microsoft as a unique user ID. The cookie enables user tracking by synchronizing the ID in many Microsoft domains. 1 year HTTP Cookie
pagead/1p-user-list/# Google Used to track whether the visitor has shown interest in specific products or events on multiple sites and how the visitor navigates between sites - This is used to measure advertising efforts and facilitates payment of referral fees between sites. Session Pixel Tracker
pagead/landing [x2] Google Collects data on visitor behavior on multiple websites to present more relevant ads - This also allows the website to limit the number of times the same ad is displayed. Session Pixel Tracker
test_cookie Google Used to check whether the user's browser supports cookies. 1 day HTTP Cookie
VISITOR_INFO1_LIVE YouTube Tries to estimate user bandwidth on pages with integrated YouTube videos. 179 days HTTP Cookie
YSC YouTube Registers a unique ID to keep statistics of the videos from YouTube that the user has watched. Session HTTP Cookie
ytidb::LAST_RESULT_ENTRY_KEY YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Persistent HTML Local Storage
yt-remote-cast-available YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Session HTML Local Storage
yt-remote-cast-installed YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Session HTML Local Storage
yt-remote-connected-devices YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Persistent HTML Local Storage
yt-remote-device-id YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Persistent HTML Local Storage
yt-remote-fast-check-period YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Session HTML Local Storage
yt-remote-session-app YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Session HTML Local Storage
yt-remote-session-name YouTube Saves the user settings when retrieving a Youtube video integrated on other web pages Session HTML Local Storage


Not classified (3)

Unclassified cookies are cookies that we are currently trying to classify, along with providers of individual cookies.

Name Provider Purpose Expiration Type
cp-popup-last-displayed www.rampa.com Pending 399 days HTTP Cookie
same44923 Thomas Publishing Pending 1 day HTTP Cookie
webtraxs.php Thomas Publishing Pending Session Pixel Tracker


11. General duration of data retention

General duration of retention of your data depends on the contract concluded.

  • Should you not conclude a contract with us, your personal data are deleted 10 years after the last contact between you and the data controller.
  • Your personal data related to a contract, in particular, data relevant to tax law shall be deleted after expiration of the legal retention periods, at the latest, 10 years after termination of the contract.

Different deletion times for each data category are pointed out, where applicable, within this data-protection information at the end of the respective category.

12. Rights of the data subject

You are entitled to the following rights regarding the data processed by us:

  • the right to information regarding your personal data stored by us in accordance with Art. 15 of the GDPR;
  • If required, the right to rectify your personal data stored by us, which is incomplete or incorrect in accordance with Art. 16 of the GDPR;
  • The right to deletion and be forgotten with regard to your personal data stored by us in accordance with Art. 17 of the GDPR;
  • Right to restrict or block the processing of your personal data in accordance with Art. 18 GDPR;
  • if applicable, the right to data portability in accordance with Art. 20 of the GDPR;
  • The right to object against the processing of your personal data in accordance with Art. 21 GDPR;
  • Right to withdraw consent, if applicable, pursuant to Art. 7 (3) of the GDPR;
  • Right to complain to a regulator body in accordance with Art. 77 of the GDPR.

In the case of further questions concerning the processing of your personal data or taking advantage of one of the rights available to you, please send us an e-mail to mail@rampa.com

13. Data security

We have set up technical and organizational security precautions to protect your data. In particular against loss, manipulation or unauthorized access. We adjust our security measures regularly in keeping with continuous technical development.


Data protection on social media


I. Introduction

In the following, you will find information about the handling of your data that are collected during your use of our social media sites on social networks and platforms. Your data are processed on the basis of statutory regulations.

II. Providers

2. Other social media providers
2.1 Controller

If your personal data are processed by one of the providers listed below, this provider is the controller of your data processing within the sense of the GDPR. In the event you wish to exercise your rights as a data subject, we point out that this can be done most effectively by contacting the relevant providers. They are the only parties with access to the data collected from you. If you nevertheless require help, please do not hesitate to contact us at any time.

We have online sites on the social media platforms of the following providers:

  • Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
  • Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
  • YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  • XING SE, Dammtorstrasse 29-32, 20354 Hamburg, Germany

2.2 Data protection officer

You will find information for contacting the data protection officer of the other social media providers here:

  • Twitter Inc.: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp
  • Instagram Inc.: https://www.facebook.com/help/contact/540977946302970
  • LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
  • XING SE: Datenschutzbeauftragter@xing.com

If you wish to contact the data protection officer for Google+ and YouTube, please get in touch with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

III. General information on social media platforms from RAMPA GmbH & Co. KG

1. Responsible authority

Controller for data processing within the sense of the GDPR is the following party insofar as we ourselves process data you have communicated to us via one of the social media platforms:

RAMPA GmbH & Co. KG
Auf der Heide 8
21514 Büchen, Germany
+494155 81 41 0
mail@rampa.com
www.rampa.com

2. Our data protection officer

You can reach our data protection officer by using the following contact data if you have any concerns about data processing that we as the controller carry out:

PROLIANCE GmbH / datenschutzexperte.de
Data protection officer
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@datenschutzexperte.de

3. General data processing on the social media platforms
3.1 Data processing for marketing research and advertising

As a rule, personal data are processed on the company’s part for market research and advertising purposes. This is achieved by the placement of a cookie on your browser; this makes it possible for the provider to recognize you when you visit a website. User profiles can be created with the help of the collected data. Such profiles are used to place advertisements that presumably align with your interests both within and outside of the platform. Moreover, data may be stored in the use profiles independently of the devices you are using. This is regularly the case if you are a member of the platform and are logged in to the platform.

3.2 Data processing during the establishment of contact

We collect personal data ourselves if you establish contact to us, e.g., by using the contact form or a messenger service such as Facebook Messenger. What data we collect are dependent on the information you provide as well as the contact data you provide or release. We store this information for the purpose of processing your query and of handling any subsequent questions you have. We will not transfer your data to third parties without your consent under any circumstances. Legal grounds for the processing of the data are our legitimate interest in answering your query in accordance with point (f) of Art. 6 (1) GDPR and, if your query includes the intent to enter a contract, point (b) of Art. 6 (1) GDPR. When your query has been finally processed, your data will be erased, provided that the erasure is not prohibited by legal retention obligations. We will assume the query has been finally processed when it is evident from the circumstances that the related matter has been finally clarified.

3.3 Data processing for contract performance

If you have contacted us via a social network or other platform with the intent of entering a contract for the delivery of goods or the performance of services with us, we will process your data for the performance of the contract or for the taking of steps prior to entering a contract and/or performance of the desired services. Legal grounds for the processing of your data are set forth in point (b) of Art. 6 (1) GDPR). Your data will be erased when they are no longer required for performance of the contract or when it is determined that the steps taken prior to entering a contract will not lead to the conclusion of a contract corresponding to the purpose of the establishment of the contact. Please note, however, that it may be necessary after the conclusion of the contract to store personal data of our contract partners so that we can fulfill contractual or legal obligations.

3.4 Data processing based on consent

If the providers of the platforms request your consent for the processing for a specific purpose, the legal grounds for the processing are found in point (1) of Art. 6 (1) and Art. 7 GDPR. Declarations of consent can be withdrawn at any time with effect for the future.

IV. Transfer of data and recipients

When you are visiting and using the platforms listed above, personal data may be transferred to the USA or other third countries outside the EU, which is why additional protective mechanisms are needed in these cases which ensure that the data protection level of the GDPR is provided. More information about whether and which suitable guarantees the providers can provide for this can be found in the list below.

We have no influence on the processing of your personal data by the provider and how it is handled. We also have no information about this. For further information, please check the data protection declaration of the respective provider and, if necessary, use the options for opt-out / personalization with regard to data processing by the provider:

  • YouTube/Google
    • Data protection statement: https://policies.google.com/privacy?hl=de&gl=de
    • Opt out: https://adssettings.google.com/authenticated
    • In accordance with the data protection declaration, Google uses standard data protection clauses to provide an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU: https://policies.google.com/privacy?hl=de&gl=de
  • LinkedIn
    • Data protection statement: https://www.linkedin.com/legal/privacy-policy
    • Opt out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
    • In accordance with the data protection declaration, LinkedIn uses standard data protection clauses to provide an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
  • XING
    • Data protection statement: https://privacy.xing.com/de/datenschutzerklaerung
    • Opt out: https://nats.xing.com/optout.html?popup=1&locale=de_DE

In accordance with the data protection declaration, XING uses standard data protection clauses to provide an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU: https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender

V. Your rights

Below, you will find information regarding what rights of a data subject with respect to the controller have been granted to you by applicable data protection laws. You have the right to request information about your personal data that we process (Art. 15 GDPR). In particular, you can request information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data have been or are disclosed, the scheduled storage period; you have a right to rectification, erasure, restriction of the processing, or objection; the right to lodge a complaint; the right to obtain information about the origin of your data insofar as we did not collect them, and about the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.

To request rectification of inaccurate data or completion of your data we have stored without delay (Art. 16 GDPR).

To request the erasure of your personal data that is stored by us, provided that the processing is not necessary for exercising the right of freedom of expression and information, for performance of a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR).

To request the restriction of the processing of your personal data insofar as you have contested the accuracy of the data; the processing is unlawful, but you oppose their erasure and we no longer need the data, but you need them for the establishment, exercise, or defense of legal claims; or you have objected to the processing pursuant to Art. 21 GDPR (Art. 18 GDPR).

To receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of the data to another controller (Art. 20 GDPR).

To lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you may contact the supervisory authority of the German state where our aforementioned headquarters are located or at your habitual residence or place of work.

To withdraw at any time any consent you have previously granted for the processing of the data, effective for the future (Art. 7 (3) GDPR). If you withdraw your consent, we will erase the relevant data without delay insofar as further processing cannot be legitimized on legal grounds allowing processing without consenting. Withdrawal of consent does not affect the lawfulness of consent-based processing carried out up to the point of withdrawal.

Right to object Insofar as we process your personal data for the purposes of legitimate interests pursuant to point (f) of Art. 6 (1) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation. Insofar as the objection is to the processing of personal data for direct marketing purposes, you have a general right to object without pleading grounds relating to your particular situation.

If you wish to exercise your right to right to withdrawal or objection, you can do so simply by sending an email to mail@rampa.com

VI. Duration of storage

Your personal data we have collected will be erased from our system if and when they are no longer required for the purposes determined at the time of their collection or if and when you have exercised your right of withdrawal or objection. The above provisions are without prejudice to legal retention periods. We do not have any control over the duration of the storage of your data that have been stored by social media providers for their own purposes. Please contact these providers directly for details.

Note: The offers are aimed at commercial interested parties. Therefore, all prices are, unless otherwise indicated, net plus applicable taxes.