Privacy Policy

We, Reiser Simulation and Training GmbH, take the protection of your personal data seriously. This privacy policy describes how we collect and record, use, disclose, transfer and store your personal data (“process”). Which personal data we collect depends on the context of your interactions with us, on the products, services and features you obtain from us, on your location and place of business, and on the applicable law in each case. The confidentiality and integrity of your personal data are of particular concern to us.

Who is the controller responsible for the data processing?

Reiser Simulation and Training GmbH (hereinafter “Reiser”)
Oberer Luessbach 29-31, 82335 Berg / Germany, registered office and register court: Munich HRB 91963
is the provider of the website www.reiser-st.com and the controller for data processing in connection with the use of the website.

Which of your data do we process and for what purpose?

Unless described in detail at the relevant points of the website, personal data is processed as follows when you use our website www.reiser-st.com:

A. Use of the contact form (Art. 6(1)(b) GDPR)

On some pages of our website you have the option of getting in touch with us. On the relevant pages we indicate in each case which data we collect for the respective request.

• your contact details, such as first name and surname, business address, business telephone number, business mobile number and business email address,
• organizational information, including position and company name,
• further personal data that you provide yourself in contact forms and other forms of an online offering,
• information that you provide as part of a support request
• information that is collected automatically when an online offering is used, such as your device and user identifier, information about your operating system, pages and services you used and visited during your visit, as well as the date and time of a user request.

In general, we only collect the data that is required for the respective purpose.

B. Cookies, consent and third-party services (Art. 6(1)(a) GDPR, Section 25 TDDDG)

We use cookies and similar technologies on our website. Technically necessary cookies, without which the website does not work (for example storing your language selection and your cookie choices), are set without consent on the basis of Section 25(2) no. 2 TDDDG. All other services, in particular statistics, marketing and external media, are only loaded once you have given your consent in our cookie dialog. The legal basis is then your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw or adjust your consent at any time with effect for the future, via the “Cookie settings” link at the bottom of every page or here:

Consent management with Borlabs Cookie

To request, store and technically enforce your consent, we use the consent tool Borlabs Cookie (Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany). It runs entirely on our own server; no data is transmitted to the manufacturer. It stores a random identifier, the time of your selection, the version of the settings and your selection itself, in the cookie “borlabs-cookie” for 183 days and in a consent log on our server. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Section 25(2) no. 2 TDDDG.

Google Tag Manager

With your consent to the “Statistics” category, we load Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself does not analyse any data; it controls the loading of the Google services listed below. When it loads, your IP address is transmitted to Google. Without consent, Tag Manager is not loaded. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Google Analytics 4

With your consent to the “Statistics” category, we use Google Analytics 4 (Google Ireland Limited). Google Analytics records which pages you visit, how long you stay and where you came from, as well as your device, browser and approximate location. We also measure whether forms are submitted, without transmitting their contents. IP addresses are not stored in Google Analytics 4. We retain user-level data for 14 months, after which it is deleted automatically. Cookies used: “_ga” (2 years, distinguishes users) and “_ga_<ID>” (2 years, stores the session state). The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Google Ads conversion tracking

With your consent to the “Marketing” category, we use Google Ads conversion tracking (Google Ireland Limited) to measure whether Reiser advertisements lead to enquiries on this website. For this purpose, Google sets a cookie when you reach our website via a Google ad. Data may be linked to your Google account and across websites. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Google Consent Mode

We use Google Consent Mode in the “Basic” variant. This means that as long as you have not given consent, no Google tag is loaded and no data is transmitted to Google, not even anonymised signals. Only after you have given consent do we pass your selection on to Google and activate the services listed above.

YouTube

On some pages we embed videos from YouTube (Google Ireland Limited). These are only loaded once you consent to the “External Media” category or unlock the individual video. Until then you only see a preview image served from our own server. When a video is played, your IP address and usage data, among other things, are transmitted to YouTube, and YouTube may set cookies. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Transfer to the USA

Google may also transfer the data collected by the services listed above to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR). In addition, by giving your consent in the cookie dialog you expressly consent to the transfer under Art. 49(1)(a) GDPR. Please note that the USA does not in every case guarantee a level of data protection equivalent to EU law, and authorities there may under certain circumstances be able to access the data.

Fonts

The font used on this website is loaded from our own server. No connection is made to Google Fonts or any other external font service.

List of all services in use

The following list is generated automatically and always shows the current set of services used on this website, including provider, purpose, cookies used and storage period:

C. Compliance with legal obligations to which Reiser is subject (Art. 6(1)(c) GDPR)

We will also process personal data where there is a legal obligation to do so. This may occur, for example, in the context of ensuring the operation of IT systems. Ensuring operation includes, among other things, the following activities:

• backup and restoration of data processed in IT systems,
• logging and monitoring of transactions in order to verify the correct functioning of the IT systems,
• detection and prevention of unauthorized access to personal data,
• incident and problem management to resolve malfunctions in IT systems.

Reiser is subject to a large number of further legal obligations. In order to meet these obligations, we process your data to the extent required and, where applicable, pass it on to the responsible authorities within the scope of statutory reporting duties.

D. Newsletter (Art. 6(1)(a) GDPR)

At the bottom of every page you can subscribe to our newsletter. For this we need your email address. We use the newsletter to inform you about Reiser products, projects, trade fairs and news. The legal basis is your consent under Art. 6(1)(a) GDPR.

Subscription uses a double opt-in procedure: after entering your email address you receive a confirmation email. The subscription only becomes effective once you click the link contained in that email. This ensures that nobody can subscribe your address without your knowledge. In order to be able to prove your consent (Art. 7(1) GDPR), we store the time of subscription and confirmation together with the IP address used.

You can unsubscribe from the newsletter at any time and thereby withdraw your consent with effect for the future, via the unsubscribe link at the end of every newsletter email or by sending a message to the contact details given below. After withdrawal we delete your email address from the distribution list. We retain the record of the consent previously given for as long as is necessary to defend against any legal claims.

For sending the newsletter we use the service Mailchimp provided by The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, a company of Intuit Inc. Mailchimp processes your data on our behalf on the basis of a data processing agreement under Art. 28 GDPR. The data is processed on servers in the USA. Mailchimp is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR); in addition, the EU standard contractual clauses have been agreed.

Our newsletters contain a tracking pixel and trackable links that allow us to record statistically whether and when a newsletter was opened and which links were clicked. This analysis serves to improve our content and is covered by your consent. If you do not want this, you can unsubscribe from the newsletter at any time.

E. Protection of legitimate interests (Art. 6(1)(f) GDPR).

Irrespective of the use of this website, we also process your personal data insofar as this is necessary to protect legitimate interests, for example to exercise or defend legal claims.

How long do we store your data?

Unless an explicit storage period is stated at the time of collection (for example in a declaration of consent), your personal data will be deleted once it is no longer required to fulfill the purpose of the storage, unless statutory retention obligations (for example retention obligations under commercial and tax law) prevent deletion.

How is your data secured?

We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, use or alteration, as well as against unauthorized disclosure or unauthorized access.

Whom do we pass data on to and how do we protect it in the process?

Reiser is a globally active company. Insofar as it is necessary to handle your request, your data will be passed on, for example, to the national sales company in your home country. We also engage commissioned service providers who preferably process your data within the EU.

If data is processed in countries outside the EU, Reiser ensures through EU standard contracts, including appropriate technical and organizational measures, that your personal data is processed in line with the European data protection level. If you would like to inspect the specific safeguards for the transfer of data to other countries, please contact us using the communication channels listed below.

For some countries outside the EU, such as Canada and Switzerland, the EU has already established a comparable level of data protection. Because of this comparable level of data protection, the transfer of data to these countries does not require any special authorization or agreement.

Contact details, your rights as a data subject and your right to lodge a complaint with a supervisory authority

The controller within the meaning of the General Data Protection Regulation (GDPR), of other data protection laws applicable in the member states of the European Union and of other data protection provisions is:

Reiser Simulation and Training GmbH
Oberer Luessbach 29-31
82335 Berg
Germany
Phone: +49 8178 8681-0
Email: dataprotection@reiser-st.com
Website: www.reiser-st.com

Any data subject may contact our data protection officer directly at any time with all questions and suggestions regarding data protection.

Rights of data subjects

As a person affected by the processing of your data, you can assert certain rights against us under the GDPR and under other relevant data protection provisions. Under the GDPR, you have in particular the following rights as a data subject vis-a-vis Reiser:

Right of access (Art. 15 GDPR):

You can request information from us at any time about your data that we hold about you. This information covers, among other things, the categories of data we process, the purposes for which we process them, the origin of the data if we did not collect it directly from you, and, where applicable, the recipients to whom we have transferred your data. You can obtain a free copy of your data from us. Should you be interested in further copies, we reserve the right to charge you for those further copies.

Right to rectification (Art. 16 GDPR):

You can request that we rectify your data. We will take appropriate measures to keep your data that we hold about you and process on an ongoing basis accurate, complete and up to date, based on the most current information available to us.

Right to erasure (Art. 17 GDPR):

You can request that we erase your data, provided the legal requirements for this are met. Under Art. 17 GDPR, this may be the case, for example, where

• the data is no longer required for the purposes for which it was collected or otherwise processed;
• you withdraw your consent, which is the basis of the data processing, and there is no other legal basis for the processing
• you object to the processing of your data and there are no overriding legitimate grounds for the processing, or you object to data processing for direct marketing purposes;
• the data was processed unlawfully

provided the processing is not necessary,

• in order to ensure compliance with a legal obligation that requires us to process your data;
• in particular with regard to statutory retention periods;
• in order to establish, exercise or defend legal claims.

Right to restriction of processing (Art. 18 GDPR):

You can request that we restrict the processing of your data if

• you contest the accuracy of the data, for the period we need in order to verify the accuracy of the data;
• the processing is unlawful and you refuse the erasure of your data and instead request the restriction of its use;
• we no longer need your data, but you need it in order to establish, exercise or defend legal claims;
• you have objected to the processing, for as long as it has not yet been determined whether our legitimate grounds override yours.

Right to data portability (Art. 20 GDPR):

At your request we will transfer your data, insofar as this is technically possible, to another controller. However, you only have this right if the data processing is based on your consent or is necessary in order to perform a contract. Instead of receiving a copy of your data, you can also ask us to transfer the data directly to another controller specified by you.

Right to object (Art. 21 GDPR):

You can object at any time to the processing of your data on grounds relating to your particular situation, provided the data processing is based on your consent or on our legitimate interests or those of a third party. In this case we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests, or if we need your data in order to establish, exercise or defend legal claims.

Deadlines for fulfilling data subject rights.

As a matter of principle, we endeavor to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific data subject right or to the complexity of your request.

Limitation of information when fulfilling data subject rights.

In certain situations we may not be able to provide you with information about all of your data, due to legal requirements. If we have to reject your request for access in such a case, we will inform you at the same time of the reasons for the rejection.

Complaint to supervisory authorities.

Reiser Simulation and Training GmbH takes your concerns and rights very seriously. However, if you are of the opinion that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with your competent data protection authority.