1. Name and address of the controller
As a data subject, you can contact our controller directly with any questions or suggestions on data protection.
Responsible person within the meaning of the GDPR, other applicable data protection laws in the member states of the European Union and other regulations with data protection content is:
Wilhelm Rosebrock GmbH & Co. KG
General Manager Mr. Martin Sommer
Tel.: +49 (0) 4 21 / 520 00 - 0
2. Purpose of processing your personal data
By processing your personal information, we want to ensure that you have a user-friendly, safe and efficient service that is tailored to your individual needs and wishes. We process your personal data in particular if it is essential for the functioning of our website and our services and to provide the services you requested.
In addition, we offer you on our website various services that are not just for informational benefit. If you wish to use these services, you must provide additional personal information. We use this data in accordance with the following data processing principles in order to provide the service you have selected.
We process your personal data only with your prior consent. We only waive your prior consent if we cannot obtain your consent beforehand for real reasons and the processing of your data is expressly permitted by law.
3. Legal basis for the processing of your personal data
The legal basis for processing your personal data arises from the European General Data Protection Regulation (GDPR), the Federal Data Protection Act new (BDSG-new) as well as other relevant laws.
The legal basis of the GDPR:
Art. 6 I lit. a GDPR
processing of personal data after obtaining the consent of the data subject for the personal data concerning him for one or more specific purposes
Art. 6 I lit. b GDPR
Processing of personal data is required to fulfill a contract or to carry out pre-contractual measures to which the data subject is a party, and which are made at the request of the data subject
Art. 6 I lit. c GDPR
Processing of personal data to fulfill a legal obligation to which we are subject
Art. 6 I lit. d GDPR
Processing of personal data for the protection of vital interests of the data subject or another natural person
Art. 6 I lit. e GDPR
Processing of personal data for the performance of a task of public interest or in the exercise of official authority delegated to the controller
Art. 6 I lit. f GDPR
processing of personal data for the protection of our legitimate interest or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail, in particular if the data subject is concerned a child is acting.
4. Protection of minors
All persons under the age of 16 should not submit any personal information to us without the consent of their parent or guardian. We do not collect personally identifiable information about children and adolescents and do not share such information with third parties.
5. Categories of recipients of personal data
5.1. Transfer of personal data to external service providers
We can also forward your personal data to external service providers for processing:
- to fulfill our legal notification obligations acc. Art. 6 I lit. c GDPR, which includes in particular public authorities (e.g. social security funds, tax authorities or law enforcement authorities)
- to fulfill a contract or pre-contractual obligations acc. Art. 6 I lit. b GDPR (e.g. payment service provider)
- on the basis of a legitimate interest acc. Art. 6 I lit. f GDPR (for example, service providers such as web hosts, external data centers, credit institutions, printers, courier companies, accounting firms, etc.)
- on the basis of your consent acc. Art. 6 I lit. a GDPR
Should you take part in promotions or sweepstakes, sign a contract with us or use similar services that we offer together with other partners, we can pass on your data to external service providers. You will receive further information before you enter your data and directly in the offer description.
All external service providers commissioned by us are carefully selected, bound by our instructions and monitored regularly by us.
If we commission third parties on the basis of a contract processing contract, we observe Art. 28 GDPR.
5.2. Disclosure of personal data outside the European Economic Area (EEA)
On our website we use functions of external providers based in non-European countries. Your personal data can therefore also be processed and stored outside the EU. We only transfer your personal data outside the European Economic Area (EEA) if the European Commission has been certified by the European Commission as having an adequate level of data protection or privacy guarantees. Data may also be transmitted to a non-European third country if we inform you in advance and if you give us your consent. In addition, we can agree with the provider the standard contractual clauses for the protection of personal data.
For more information, see
5.3. Data erasure and storage duration
Your personal data will be deleted or blocked if the purposes for which it was collected or otherwise processed are no longer available. We store your personal data for the period in which claims (for example, statutory limitation periods of up to 30 years) can be asserted against us. In addition, data storage is only possible if the European or German legislator does so for verification and retention periods, e.g. Commercial Code (HGB), Tax Code (AO) or Money Laundering Act (GWG). The blocking or deletion of personal data is carried out by us, if a legally standardized storage period expires. Otherwise, the necessity exists for the further storage of the data for a contract conclusion or a contract fulfillment.
6. Your rights as an affected person
You have a right to your personal data
- confirmation and information,
- limitation of processing,
- objection to the processing and
- data portability.
You also have the right to complain to us about the processing of your personal data by a data protection supervisory authority.
Your inquiries will be processed within 30 days. We may request that you enclose with your request a photocopy of proof of your identity.
6.1 Right to confirmation and to information
You have a right to free information as to whether we process personal data about you. If this is the case, they have a right to information about such personal data and to the following information:
- the processing purposes;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
- the right of rectification or erasure of the personal data concerning them or restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data are not collected from the data subject, all available information on the source of the data;
- the existence of automated decision-making including profiling according to Art. 22 I, IV GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
If your personal data are transmitted to a third country or to an international organization, you have the right to be informed of the appropriate guarantees under Art. 46 GDPR in connection with the transfer.
We provide you with a copy of the personal data that is the subject of the processing. For any additional copies you request, we may charge a reasonable fee based on administrative costs. If you submit the application electronically, we will provide you with the information in a standard electronic format, unless you specify otherwise. Your right to receive a copy under paragraph 3 shall not affect the rights and freedoms of others.
6.2 Right to rectification (Art. 16 GDPR)
You have a right to immediate correction if your personal information has been stored incorrectly or incompletely with us. You can contact our (data protection officer) (the controller) at any time. You can also assert your right by means of a supplementary statement. The purpose of the processing must be taken into account.
6.3 Right to cancellation / "right to be forgotten" (Art. 17 GDPR)
You have the right under Art. 17 GDPR at any time to demand the immediate deletion of your personal data if one of the following reasons is present and the processing is no longer necessary:
- Your personal information has been collected or otherwise processed for purposes for which your information is no longer needed.
- You revoke your appointment pursuant to Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR consent given to GDPR and other legal bases for the processing are not given.
- You file an objection under Art. 21 I GDPR against the processing of your data for reasons that arise from your particular situation. This also applies to a profiling based on the GDPR. Thereafter, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
- In accordance with Art. 21 II GDPR, you object to the processing of your personal data in order to operate direct mail. This also applies to the profiling, as far as it is associated with such direct mail.
- Your personal data has been processed unlawfully.
- The deletion of your personal data is necessary to fulfill a legal obligation under the law of the European Union or German law.
- Your personal data has been collected for the consent of a child in relation to information society services offered pursuant to Art. 8 I GDPR.
If your personal data have been made public by us and if we as the person in charge under Art. 17 I GDPR are obliged to delete your personal data, we shall take appropriate measures, including technical ones, for deleting your personal data, taking into account the available technology and the costs of implementation Data Controllers who process your published personal information should inform you that you have requested the deletion of all links to such personal data or copies or replications of such personal data from those other data controllers, unless the processing is necessary.
6.4 Right to limit processing (Art. 18 GDPR)
You have the right to require us to restrict processing if any of the following conditions apply:
- You deny the accuracy of your personal information for a period of time that enables us to verify the accuracy of your personal information;
- the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of personal data;
- We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights, or
- You have objected to the processing under Art. 21 I GDPR, as long as it is not certain that our legitimate reasons prevail over yours.
If processing has been restricted in accordance with Art. 21 I GDPR, your personal data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for important reasons the public interest of the Union or of a Member State.
If you have restricted the processing according to Art. 21 I GDPR, you will be notified by us before the restriction is lifted.
6.5 Data transferability (Art. 20 GDPR)
You have the right to receive the personal information you have provided to us in a structured, common and machine-readable format, and you have the right to transfer that information to another person without hindrance from us, provided that
- the processing on a consent according to Art. 6 I lit. a GDPR or Art. 9 II lit. a GDPR or on a contract pursuant to Art. 6 I lit. b GDPR is based and
- the processing is done using automated procedures.
In exercising your right to data transferability under paragraph 1, you have the right to obtain that your personal information be transmitted directly by us to another party, as far as technically feasible.
The exercise of the right under paragraph 1 of this Article is without prejudice to Art. 17 GDPR. This right does not apply to any processing necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to us.
The right under paragraph 1 shall not affect the rights and freedoms of other persons.
6.6 Right to object (Art. 21 GDPR)
You have the right at any time, for reasons that arise from your particular situation, against the processing of personal data relating to your personal data, which pursuant to Art. 6 I lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions. We no longer process personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If personal data is processed in order to operate direct mail, you have the right to object at any time to the processing of your personal data concerning the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
You have been informed at the latest at the time of the first communication with us expressly on the rights referred to in Art. 21 paragraphs 1 and 2 GDPR; this notice has been given in an understandable and separate form.
Regarding the use of information society services, regardless of Directive 2002/58 / EC, you can exercise your right to object through automated procedures that use technical specifications.
You have the right, for reasons arising out of your particular situation, to object to the processing of your personal data relating to the processing of your personal data for scientific, historical or statistical purposes under Art. 89 I GDPR, unless processing is necessary to fulfill a public interest task.
If you exercise your right to object, we ask you to inform us of the grounds for opposition. If your objection is justified, we examine the situation and either stop the processing of the data or inform you of our compelling reasons worthy of protection, on the basis of which we will continue our data processing.
6.7 Automated decisions in individual cases including profiling (Art. 22 GDPR)
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner.
That does not apply if the decision
- is required for the conclusion or performance of a contract between us and you,
- is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard the rights and freedoms and your legitimate interests, or
- with your express consent.
In such cases, we will take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own viewpoint and to contest the decision.
Decisions pursuant to Art. 22 II GDPR may not be based on special categories of personal data pursuant to Art. 9 I GDPR unless Art. 9 II lit. a GDPR and g GDPR reasonable measures have been taken to protect your rights and freedoms and your legitimate interests.
6.8 Right to revoke a data protection consent
You have the right to revoke the consent given to us for the processing of your personal data at any time with future effect, according to Art. 7 III GDPR. Please use the contact details above.
6.9 Right of appeal to the competent supervisory authority
In the event of data protection violations, you have the right of appeal to the competent supervisory authority. The competent supervisory authority in data protection matters is the state data protection officer of the federal state in which we have our headquarters. A list of data protection officers and their contact details are available at the following link:
7. Provision of our website and creation of log files
For technical reasons, we automatically collect the following data and save them as "server log files", which your Internet browser transmits to our provider or server before our website is displayed:
- used browser type and version
- Operating system and interface used
- Access status / HTTP status code
- Amount of transmitted data in bytes
- Source from which you came to our website (Referrer URL)
- Visited website
- Date and time of your request
- Time shift to Greenwich Mean Time (GMT) between requesting host and
- used (IP) address.
This data collection is completely independent of whether you register or otherwise transfer personal data to us. There is data storage in our system but separate from other personal data.
The legal basis for the temporary data storage and storage of the log files is Art. 6 I lit. f GDPR.
The purpose of temporary storage in logfiles is to make our website available to you. The data is evaluated for statistical purposes only, to improve our website and our offer. An evaluation for marketing purposes does not take place.
The stored data in logfiles will be deleted after seven days at the latest. A longer storage takes place only if the data are anonymized, so that an assignment is no longer possible.
Since the collection of data for the provision of our website and the storage of data in log files are mandatory, you have no disagreement.
Cookies are small text files that can be used by websites to make a user's experience more efficient.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
Our website uses the following cookies:
- Transient cookies
- Persistent cookies
The Transient Cookies are automatically deleted on your computer when you log out, leave our website or close your browser. These are mostly session cookies. These cookies contain a so-called session ID, which consists of a random unique string (numbers and letters). These small pieces of information enable a clear recognition of the cookie, which allows web pages and servers to be associated with the specific internet browser in which the cookie was stored. This allows the visited web pages and servers to distinguish the respective person's browser from other internet browsers with other cookies. Your Internet browser can thus be recognized and identified via the unique session ID.
The persistent cookies, on the other hand, are only deleted after the expiry of a specified period, which varies according to the type of cookie. In the security settings of your browser, you can delete these cookies at any time.
All data collected by us are pseudonymized by a technical procedure, so that the collected data cannot be assigned to you personally anymore. Storage with your other personal data does not take place.
You can delete cookies in the following browsers and change the cookie settings as follows:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
iPhone, iPad or Apple accessories: https://support.apple.com/en-us/HT201265
Android Phones or Accessories: https://hubpages.com/technology/How-to-delete-internet-cookies-on-your-Droid-or-any-Android-device
There is no possibility to prevent the transmission of Flash cookies via the settings of your browser. Use here the settings of the Flash Player.