We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
1 Responsible for data processing
The responsible entity according to Art. 4 (7) EU General Data Protection Regulation (GDPR) is
RIB Software SE
Vaihinger Str. 151
Tel.: +49 711 7873-0
Fax: +49 711 7873-88204, E-Mail: info[at]rib-software.com.
2 Contact of the data protection officer
You can contact our data protection officer at datenschutz[at]rib-software.com or our postal address with the addition of "data protection officer".
3 Information on data processing, legal basis and categories of recipients
3.1 Data collection when visiting our website
During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should concrete indications point to illegal use.
3.2 Website optimization - Cookies - General
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.
A processing of personal data by cookies for marketing purposes or for the creation of statistics only takes place if you have given us your consent for this. The legal basis for this is Art. 6 para. 1 lit. a GDPR.
You can adjust your consent at any time without giving reasons by adjusting your settings in the Consent Manager.
We may work together with advertising partners who help us to make our internet offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below. Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Please note that if you do not accept cookies, the functionality of our website may be limited.
Advertising partners and tools - Settings in the Consent Manager:
3.3 Contacting us by e-mail or contact form
When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.
The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.
Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
3.4 Data processing for order processing
To process your order, we work together with service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data collected by us may be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we inform explicitly about this below.
The legal basis for the transfer of data is here Art. 6 para. 1 lit. b GDPR.
3.5.1 Newsletter subscription
With your consent according to Art. 6 para. 1 a GDPR, you can subscribe to our newsletter, with which we inform you about our current offers. For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 a GDPR.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by contacting the data protection officer indicated above.
3.5.2 Newsletter for existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular e-mail offers for similar goods or services to those you have already purchased from our range. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this.
In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning.
For this, you will only incur transmission costs according to the prime rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
3.5.3 Newsletter tracking
Our newsletters are designed in such a way that it is possible for us to gain insights into improvements, target groups or the reading behavior of our subscribers. This enables us to use a so-called web beacon or a tracking pixel, which reacts to interactions with the newsletter, for example, whether links are clicked, the newsletter is opened at all or at what time the newsletter is read. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to improve the content of our offers and to record the success of individual marketing measures.
3.6 Registration for seminars and events
You have the option of registering with us for specific seminars or other events. For this purpose, we collect personal data that is necessary for the implementation of the event, in particular
- Name of the contact person
- telephone number
- e-mail address
- Name of the participants
- Date and period of the event
- Optional information
This data will be processed exclusively for the purpose of holding the event and billing any seminar fees. The legal basis for this is Art. 6 para. 1 lit. b GDPR. We also use data provided to us for advertising purposes, in particular to inform you about thematically similar news or offers, as described in point 3.5.2. If you do not wish to receive this advertising, you can object to further use at any time.
The data relating to your participation will be stored in our customer system for the duration of our business relationship. If you wish your data to be deleted, please contact us via the channels mentioned at the beginning.
If you participate in one of our digital events, the login name you choose will also be visible to other participants in the event. If you do not wish this, please select a correspondingly anonymous login name in the respective application used.
3.7 Our Social Network Channels
We operate channels on various social platforms to communicate directly with you and inform you about interesting news from our company. In doing so, we process the data of visitors to our channels, in particular information about user interactions (e.g. likes, comments, retweets), demographic and statistical data, as well as the data transmitted to us as part of messages and comments.
We would like to point out that when using these social networks, the respective providers also gain access to your data. This data may be used for market research and advertising purposes. We have no further knowledge of the data processing by the providers of the social platforms concerned. We would like to point out that the references to the respective platforms included on our site are purely links. Data processing by the platforms only takes place when you visit them.
The processing of personal data of visitors to our online presences is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest is to ensure communication with our customers, their information about news related to our products. We would like to point out that the data processed when using social platforms and networks may be processed outside the EU/EEA.
The social networks are partly operated by providers based outside the EU/EEA. Therefore, it cannot be ruled out that your data may also be transferred to countries with a different level of data protection than within the EU. We have concluded so-called EU standard data protection clauses with the providers in order to comply with the requirements of Art. 44 GDPR and to ensure a sufficient level of data protection. Please note that we have no influence on those data that the providers of the networks process under their own responsibility.
For a comprehensive presentation of the respective data processing and opt-out options, please refer to the following pages of the providers:
YouTube / Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Kununu (kununu GmbH, Neutorgasse 4-8, Top 3.02, Vienna, Austria)
4 Data transfer
A transfer of your data to third parties does not take place in any case, unless we are legally obligated to do so, or the data transmission is necessary for the execution of the contractual relationship, or you have expressly consented to the transmission of your data beforehand.
External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery, will only receive your data insofar as this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure within the framework of order processing pursuant to Art. 28 GDPR that they comply with the provisions of data protection laws in the same manner. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of third-party services, whereby we check within the scope of reasonableness that the services comply with the legal requirements.
We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection is established at the recipient before transferring your personal data. This means that a level of data protection is achieved via EU standard contracts or an adequacy decision that is comparable to the standards within the EU.
5 Your rights
The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
5.1 Right to information according to Art. 15 GDPR:
In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing that concern you, as well as your right to be informed about what guarantees exist in accordance with Article 46 of the GDPR if your data is transferred to third countries;
5.2 Right to rectification according to Art. 16 GDPR:
You have the right to have any inaccurate data relating to you corrected without delay and/or to have any incomplete data stored by us completed;
5.3 Right to erasure according to Art. 17 GDPR:
You have the right to request the deletion of your personal data if the requirements of Art. 17 (1) DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
5.4 Right to restriction of processing according to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved, or if you have objected on the grounds of your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;
5.5 Right to information according to Art. 19 GDPR:
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
5.6 Right to data portability according to Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;
5.7 Right to revoke consent given in accordance with Art. 7(3) GDPR:
You have the right to revoke consent to the processing of data, once given, at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
5.8 Right of objection according to Art. 21 GDPR:
If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
5.9 Right of objection according to Art. 21 GDPR
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
6 Data security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
Last updated: July 2021