1. Principle

You can of course revoke your declaration(s) of consent at any time with effect for the future. Please contact the person responsible for this in accordance with point 2. 

The following statements inform you about the type, scope and purpose of the collection, processing and use of personal data. This privacy policy only applies to the individual pages of our website www.riani.com. If you are forwarded to internet offers of third parties via links on our sites, please inform yourself there about the respective handling of your data.

2. The data controller and the data protection officer 

(1) Name and Adress of the Data Controller 

The responsible person in terms of the basic data protection regulation and other national data protection laws of the member states and other data protection regulations is: 

RIANI GmbH 

Riani Platz 1 

73614 Schorndorf Deutschland 

Tel.: +49 (0) 7181 93 88 40 

Fax: +49 (0) 7181 93 88 440 

E-Mail: info@riani.com Website: https://www.riani.com 

(2) Name and Adress of the Data Protection Officer 

The Data Protection Officer for the data controller is: 

Nicole Sosto Archimio 

Riani Platz 1 

73614 Schorndorf Deutschland 

Tel.: +49 (0) 7181 93 88 54 

E-Mail: datenschutzbeauftragter@riani.com

3. Legal basis for the processing of personal data 

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 sentence 1 lit. a) of the EU Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b) of the DPA serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures. Insofar as processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c) GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 sentence 1 lit. f) GDPR serves as the legal basis for the processing.

4. Data delate and storage duration 

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which we are subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

5. Definition of terms 

The privacy policy is based on the terms used by the European regulator in the adoption of the basic EU data protection regulation (hereinafter referred to as "GDPR"). The privacy policy should be easy to read and understand. To ensure this, the most important terms are explained below: 

a) Personal data

 means any information relating to an identified or identifiable natural person (hereinafter referred to as 'data subject') An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, on-line identification, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. In principle, you can also use our website without disclosing any personal data about yourself. Personal data is only stored by us if you provide it voluntarily when contacting us. We do not pass on your personal data to third parties. 

b) Anonymized data 

When you visit our website, information on access to our servers may also be stored. This data includes, among other things, browser type, browser version, operating system, referrer URL or time of server request. The hosting provider of our Internet pages automatically collects and stores this information in so-called server log files, which are automatically transmitted by every browser. This data is not personal data. They are evaluated exclusively for statistical purposes and are automatically deleted after 53 days. However, we reserve the right to check this data subsequently if we become aware of concrete indications of illegal use. 

c) The data subject 

is any identified or identifiable person whose personal data is processed by the data controller for processing. 

d) Processing 

is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 

e) Profiling 

refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person, in particular to analyses or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

f) Pseudonymization 

is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable person. 

g) The data controller or the person responsible for processing 

means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the data controller or the specific criteria for their appointment may be laid down in accordance with Union law or the law of the Member States. 

h) The Processor 

refers to a legal person, public authority, agency or other body which processes personal data on behalf of the controller. 

i) The Recipient 

is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may be entitled to receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients. 

j) A third Party 

is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data. 

k) Consent

is any freely given, specific, informed and unambiguous indication of the data subject/user's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

6. Data security 

When you visit our website, the data is transmitted unencrypted via the Internet. To ensure sufficient data security during transmission, we use state-of-the-art encryption procedures (SSL). You can recognize this by the indication >>https<< in front of our domain name. In addition, the address line of your browser also indicates a secure connection. We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Complete data security cannot be guaranteed when communicating by e-mail. Therefore, we recommend that you send your data by post, especially for correspondence with sensitive or important content.

7. Use of cookies 

Cookies are small files that enable us to store specific information related to your device (PC/Mac, tablet, smartphone, etc.) on your end device. This enables us to obtain certain data about your computer and your connection to the Internet, including IP address, browser used, operating system, etc. We will not pass on the data we collect to third parties or create a link to personal data without your consent. 

We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after changing pages. The following data is stored and transmitted in the cookies: 

- Language settings 

- Items in a shopping cart 

- Log-In information 

We also use cookies on our website which enable analysis of the user's online behaviour. The following data can be transmitted in this way: 

- Entered search terms 

- Frequency of page views 

- Use of website functions 

The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 S. 1 lit. f) GDPR. 

The legal basis for processing personal data by using cookies for analytical purposes, if the user's consent to this has been obtained, is Art. 6 para. 1 S. 1 lit. a) GDPR. 

Cookies do not cause any damage to your computer and do not contain viruses or other malware. On the one hand, they serve the user-friendliness of our Internet pages and thus you as a user (e.g. when saving login data). On the other hand, they serve to record statistical data on the use of our Internet pages in order to be able to analyses them to improve our offer. Most of the cookies we use are so-called session cookies. These cookies are completely deleted after the end of the site use or after the end of the session. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. 

You as a user can influence the use of cookies. Most browsers have a function with which you can restrict or completely prevent the storage of cookies and activate the automatic deletion of cookies when the browser is closed. However, we would like to point out that the use and especially the comfort of our Internet pages without cookies can be limited. You may not delete the opt-out cookies as long as you do not want any data collection. If this or all cookies are deleted, you must set the opt-out cookie again. You can manage many online advertisement cookies of companies via the website (USA) or via the EU webseite

8. Provision of the website and creation of log files 

(1) In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we automatically collect the following data and information from the computer system of the calling computer each time the website is called up: The user's IP address Information regarding the used browser type and version The user’s operating system The user's Internet service provider Date and time of access Websites from which the user's system accesses our website Content of access (specific pages) The amount of data transmitted The language and version of the browser software The data is also stored in the log files of our system. This data is not stored together with other personal user data. (2) The legal basis for temporary storage of log files is Art. 6 para. 1 S. lit. f) GDPR. (3) Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address shall remain stored for the duration of the session. to optimize the contents of our website as well as the advertising for it to ensure the functionality of our information technology systems and the technology of our website to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context. These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 S.1 lit. f) GDPR. (4) The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection - in this case at the end of the usage process. If the data is stored in log files, this will be undertaken in seven days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or anonymised in such a way that assignment of the accessing client is no longer be possible. (5) Collection of data for the provision of the website and the storage of data in log files is imperative for the operation of the website, so there is no inconsistency.

9. Newsletter 

If you would like to receive our newsletter, we require an e-mail address from you as well as other information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter (e.g. name and time of registration). 

In order to avoid abusive or erroneous e-mail information, we use the so-called double-opt-in procedure. This means that we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that the e-mail address is correct. In addition, we store your IP address and the time of registration and confirmation. 

We use the mail functions of CleverReach (provider: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany) to send our newsletter. For this reason, the data you provide in the course of registering for the newsletter (name, e-mail address, IP address as well as date and time of registration) is transferred to a CleverReach server located in Germany. You can find further information online at https://www.cleverreach.com/de/datenschutz/. 

You can revoke your consent to the storage of data and its use for sending the newsletter at any time, for example via the >> unsubscribe << link in the newsletter or by email to tina@riani.de. Your data will be deleted within 12 months after receipt of the newsletter, unless the deletion is contrary to legal storage obligations.

10. Additional information on newsletter tracking 

Our newsletter e-mails contain certain techniques for recording user behaviour, the so-called tracking pixels (web bugs). This enables us to recognize if and when a newsletter e-mail is opened and which links in it are clicked on. The data collected in this way is stored by us in order to improve the design of our newsletter even further and to be able to respond to our customers' wishes. The aim of the collection is to be able to send personalized content tailored to the individual subscribers as well as possible. 

By revoking your consent to receive our newsletter, your consent to newsletter tracking is also revoked.

11. Registration 

(1) We offer you the possibility to register on our website by entering personal data. The data will be entered into an input mask, transmitted to us and stored. As a matter of principle, this data is not passed on to third parties, unless there is a legal obligation to do so or the passing on of the data serves criminal or legal prosecution. 

The following data is collected during the registration process: 

- Name 

- Adress (if necessary a different delivery adress) 

-E-Mail adress 

-Date of birth 

- IP adress 

- Date and time of registration 

You can manage and change all information in the protected customer area. As part of the registration process, the user's consent to the processing of this data is obtained. 

(2) The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a) GDPR if the user has given his consent 

- If the registration serves the fulfilment of a contract to which you are party or the implementation of pre-contractual measures, the additional legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. b) DPA. - Registration is required for the provision of certain contents and services on our website as well as for the prevention of misuse and, if necessary, for the investigation of criminal offences. (further description of contents and services) 

- A registration is required for the fulfilment of the contract or for the implementation of pre-contractual measures. (further description of the contract; standards according to EGBGB and BGB) 

(3) The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. 

- This is the case for the data collected during the registration process as soon as you delete your account. We also store the voluntarily provided data for the time until the account is deleted, unless you delete it yourself beforehand. 

- This is the case for the data collected during the registration process for the purpose of fulfilling a contract or carrying out pre-contractual measures if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations. Continuing obligations require the storage of personal data during the contract period. In addition, warranty periods must be observed and the storage of data for tax purposes. Which storage periods are to be adhered to in this regard cannot be determined in a general manner, but must be determined for the respective contracts and contracting parties in each individual case. 

- If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations that prevent deletion. 

Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the data controller. Upon request, the data controller will provide you at any time with information about the personal data stored about the data subject. Furthermore, the data controller will correct or delete personal data at the request or notice of the data subject, unless this is contrary to any legal retention obligations. You can contact the data controller or the data protection officer pursuant to § 1 at any time by e-mail or by post and request the deletion or modification of the data.

12. E-Commerce 

(1) If you want to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory data necessary for the processing of contracts are marked separately, further data are voluntary. The data will be entered into an input mask, transmitted to us and stored. 

The following data is collected within the framework of the web shop: 

- Name 

- Adress (if necessary a different delivery adress) 

- E-Mail adress 

- Date of birth 

- IP adress 

- Date and time of registration 

The data will only be passed on to third parties if the transfer is necessary for the purpose of processing the contract or for invoicing purposes or for the collection of payment or if you have given your express consent. In this regard, we only pass on the data required in each case. 

The recipients are: 

- the respective delivery/shipping company (transfer of name and address, order details) 

- Collection companies, as far as the payment has to be collected (transfer of name, address, order details) 

- Credit inquiry agencies to check creditworthiness (passing on name, address, date of birth etc.). In this case, the information is only passed on if we make advance payments for orders (e.g. purchase on account). 

- the bank to collect the payment, if the payment is made by direct debit 

You can voluntarily create a customer account, through which we can save your data for further purchases at a later date. When you create an account under "My account", the data you provide will be stored revocably. All other data, including your user account, can always be changed in the customer area. 

(2) The legal basis is Article 6(1)(b) of the GDPR. With regard to voluntary data, the legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a) GDPR. 

(3) The compulsory data collected are necessary for the fulfilment of the contract with the user (for the purpose of sending the goods and confirming the contents of the contract). We therefore use the data to answer your inquiries, to process your order, to check creditworthiness or to collect a claim, if necessary, and for the purpose of technical administration of the web pages. The voluntary information is provided to prevent misuse and, if necessary, to clarify criminal offences. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information. 

(4) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years after execution of the contract. After [two years], however, we will restrict processing, i.e. your data will only be used to comply with legal obligations. If there is a continuing obligation between us and the user, we store the data for the entire term of the contract and for ten years thereafter (see above). With regard to data provided voluntarily, we will delete the data at the end of [two] years after the execution of the contract, provided that no further contract is concluded with the user during this period; in this case, the data will be deleted at the end of [two] years after the execution of the last contract. 

(5) Registration serves to conclude a contract: If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible, unless contractual or legal obligations prevent deletion. Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the data controller. Upon request, the data controller will provide you at any time with information about the personal data stored about you. Furthermore, the data controller corrects or deletes personal data at the request or notice of the data subject, provided that this does not conflict with any statutory storage obligations. You can contact the data controller or the data protection officer pursuant to § 1 at any time by e-mail or by post and request the deletion or modification of the data.

13. Disclosure of personal data to third parties  

1. Embedding YouTube videos 

(1) We have included YouTube videos in our online offer, which are stored on http://www.YouTube.com and can be played directly on our website. [They are all integrated in the "Extended Privacy Mode", i.e. no data about you as a user is sent to Youtube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer. When you visit this website, YouTube receives the information that you have accessed the corresponding subpage of our website. The following data is transmitted 

- Device-specific information, such as the hardware used; the version of the operating system; unique device identification and information about the mobile network including your telephone number. 

- Log data in the form of server logs. This includes, but is not limited to, details of how the services were used, such as search queries; IP address; hardware settings; browser type; browser language; date and time of your request; source page; cookies that uniquely identify your browser or Google Account. 

- Site-related information. Google may collect information about your actual location. This includes, for example, your IP address, your WLAN access points, or mobile phone masts. 

- Further information on the data collected by Google, INC can be found at the following link: https://policies.google.com/privacy?hl=en&gl=en 

This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. 

(2) The legal basis for processing the personal data of users is Art. 6 para. 1 S.1 lit. f) GDPR. 

(3) The integration of the videos serves to make the website clearer for the user and to increase the search engine ranking of the website on Google (as far as our own videos are integrated: and to refer more specifically to our specially produced videos). YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website. 

(4) If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. 

(5) You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. 

(6) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. You will find more information there on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. 

2. Links to external websites 

This website contains links to external sites. We are responsible for our own content. We have no influence over the contents of external links and are therefore not responsible for them, in particular we do not adopt their contents as our own. If you are directed to an external site, the privacy policy provided there applies. If you notice any illegal activities or contents on this page, please let us know. In this case we will check the content and respond accordingly (notice and take down procedure).

14. Use of google maps 

We use contents of Google Maps on our internet pages to display maps and to create route maps. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using our website, you agree to the collection, processing and use of automatically collected and entered data by Google, one of its representatives or third parties. The terms of use for Google Maps can be found under >>Terms of use for Google Maps www.google.com/intl/de_de/help/terms_maps.html. You can find detailed information in the Data Protection Center of google.de https://policies.google.com/privacy and at https://cloud.google.com/maps-platform/terms/maps-controller-terms/.

15. Contact form and E-Mail contact 

(1) On our website there is a contact form which can be used for electronic contact. If you use this option, the data entered in the input mask will be transmitted to us and stored. 

These data are: 

- Salutation 

- First name 

- Last name 

- Comment 

At the time the message is sent, the following data is also stored: 

- The IP address of the user 

- Information about the browser type and version used 

- The user's operating system 

- The Internet service provider of the user 

- Date and time of access 

- Websites from which the user's system accesses the website 

- Content of the calls (concrete pages) 

- Amount of data transferred in each case 

- Language and version of the browser software 

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy. Alternatively, it is possible to contact us via the provided e-mail address. In this case the personal data transmitted with the e-mail will be stored. As far as this involves information on communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to answer your request. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation. 

(2) The legal basis for the processing of the data is Art. 6 Paragraph 1 S. lit. a) GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Paragraph 1 S.1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1S. 1 lit. b) GDPR 

(3) The processing of the personal data from the input mask serves us solely to process the contact. We will of course use the data from your e-mail enquiries exclusively for the purpose for which you provide them when contacting us. If you contact us by e-mail, the necessary legitimate interest in the processing of the data is also based on the reply. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. 

(4) You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. Regarding the revocation of the consent / objection to the storage, we ask you to contact the person responsible or the data protection officer according to § 1 via e-mail or by post. All personal data stored in the course of the contact will be deleted in this case.

16. Instagram 

We use functions of the service Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA on our Internet pages. This may include content such as images, videos or text and buttons that allow users to express their liking for the content, to tell the authors of the content or to subscribe to our articles. If users are members of the Instagram platform, Instagram may associate the access to the above content and features with the user's profile. For more information, please see the Instagram Privacy Policy http://instagram.com/about/legal/privacy/.

17. Web Analysis by google analytics (with pseudonymization)

We use on our website the service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the surfing behaviour of our users. The software sets a cookie on your computer (for cookies see point 7). If individual pages of our website are called up, the following data is stored: 

- Two bytes of the IP address of the calling system of the user 

- The accessed website 

- Entry pages, exit pages 

- The time spent on the website and the abort rate 

- The frequency of visiting the website 

- Country and regional origin, language, browser, operating system, screen resolution, use of Flash or Java</li>  

- search engines used and keywords used 

The information generated by the cookie about the use of this website by the user is usually transferred to a Google server in the USA and stored there. This website uses Google Analytics with the extension "_anonymizeIp()". The software is set so that IP addresses are not stored completely, but only in abbreviated form. In this way, it is no longer possible to assign the shortened IP address to the calling computer. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. However, the IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. 

The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. a) GDPR. 

On our behalf, Google will use this information to evaluate your use of the website and to compile reports on website activity. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. 

The data is deleted as soon as it is no longer required for our recording purposes. In our case this is after 18 months. 

The cookies used are stored on your computer and transmitted from there to our website. If you do not agree with the collection and evaluation of the usage data, you can prevent this by adjusting your browser software accordingly, by deactivating or restricting the use of cookies. Cookies already stored can be deleted at any time. In this case, however, it is possible that you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link The current link is: http://tools.google.com/dlpage/gaoptout?hl=de. You have the possibility to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. Regarding the revocation of the consent / objection to the storage, we ask you to contact the person responsible according to § 1 via e-mail or by post. 

If you visit our website with your mobile device, you can also object to its use here by deactivating Google Analytics by clicking on the following link: Deactivate Google Analytics. In this case, a cookie will be set in your browser which tells Google to stop tracking. 

The person responsible is Google Ireland Ltd, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 1 436 1001. For further information, please refer to the User Terms and Conditions at http://www.google.com/analytics/terms/de.html, the Privacy Policy at http://www.google.com/intl/de/analytics/learn/privacy.htmlsowie, the Privacy Policy at http://www.google.de/intl/de/policies/privacy. 18. Google Adwords

18. Google adwords 

On our internet pages we use the conversion tracking of Google (provider: Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you have reached our Internet pages by clicking on an advertisement placed by Google, Google AdWords will place a so-called cookie on your computer. These cookies are valid for 30 days and are not used for personal identification. If you visit certain sub-pages of our website and the cookie is still valid, we and Google can recognize that you clicked on the ad and were redirected to the subpage in question. Each AdWords customer receives a different cookie. As a result, cookies cannot be tracked on the websites of AdWords customers. 

The information collected through conversion cookies is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. These customers are told the total number of users who clicked on your ad and were redirected to a site tagged with a conversion tracking tag. However, no information that personally identifies users will be provided. For more information about and handling of cookies, please read the appropriate section of this privacy statement.

19. Affilinet 

We use functions of Affilinet (provider: affilinet GmbH, Sapporobogen 6-8, 80637 Munich, Germany) on our website for the correct recording of sales and/or leads. Thereby cookies are set on your end device which do not contain any personal data. Only the identification number of the mediating partner and the serial number of the advertising medium clicked on are recorded. The information collected in this way is required for the purpose of payment processing between us as the operator of the website and our advertising partners. The partner identification number is used to assign the commission to be paid. For more information about and handling of cookies, please read the appropriate section of this privacy statement.

20. G+J Electronic media sales 

Our Internet pages contain so-called counting pixels (web bugs) from the company G+J Electronic Media Sales GmbH, Am Baumwall 11, 20459 Hamburg, Germany. This enables us to measure the usage behaviour and delivery of advertising material. The data is stored for up to three months after the end of the advertising campaign. The purpose of the processing is to check and report on the orderly execution and optimization of advertising campaigns, such as reporting the number of advertising materials, articles called up or the length of stay. The legal basis is the legitimate interest according to Art. 6 para. 1. lit f GDPR. Data will not be transferred to third parties or to other EU countries. The data is only reported to RIANI in aggregated form. If you do not want your data to be processed, you can click here to carry out the so-called opt-out.

21. Job advertisement 

If required, we also offer job advertisements on our website, to which you can respond in electronic form by e-mail. In accordance with Art. 13 and Art. 14 GDPR, we inform you that the applicants' data is collected, stored and processed electronically for the purpose of handling the application procedure. This application data includes in particular name, address, telephone number, e-mail address, date of birth, educational information or grades. If an application results in the conclusion of an employment contract, the application data may be stored for the usual organisational and administrative process of the respective personnel file. Otherwise, that is, if applicants are rejected, the application data is deleted two months after the rejection is notified. This applies in any case unless certain legal requirements contradict this (for example, the obligation to provide evidence in accordance with the General Equal Treatment Act) or the applicant in question has expressly consented to the longer storage of his or her application data. Naturally, according to Art. 15 GDPR, you have the right to information at any time to confirm the processing as well as the right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR). Any correction or deletion of your personal data or a restriction on processing will be communicated to you on request in accordance with Art. 19 GDPR. In addition, you can request data transmission at any time under the conditions of Art. 20 GDPR. You also have the right to object at any time to the processing of personal data concerning you pursuant to Art. 21 GDPR at tina@riani.com.

22. Rights of the data subject 

If your personal data is processed, you are a data subject as defined by the GDPR and you have the following rights with respect to the data controller: 

- The right to be informed 

- The right of rectification 

- The right to limitation of processing 

- Right to deletion 

- Right to information 

- The right to data portability. 

- The right to object to processing 

- The right to withdraw data protection consent 

- The right not to apply an automated decision 

- The right to file a legal complaint with a supervisory authority 

1. Right to information 

(1) You can request that the data controller confirms whether we will process personal data that concerns you. If such processing has taken place, you can request free information from the data controller at any time about the personal data stored about you and about the following information: 

- the purposes for processing the personal data; 

- the categories of personal data being processed; 

- the recipients or categories of recipients to whom your personal data has been or will be disclosed; 

- the planned storage duration of your personal data or, if specific information in that regard is not possible, criteria for determining the storage period; 

- the existence of a right of rectification or deletion of your personal data or of a restriction on processing by the data controller or of a right to oppose such processing; 

- the existence of a right of appeal to a supervisory authority; 

- any available information on the origin of the data if the personal data has not been collected from the person concerned; 

- the existence of automated decision-making, including profiling, in accordance with Article 22 Para. 1 and 4, GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned. 

(2) You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 of the GDPR in connection with the transmission. 

2. The right of rectification You have the right to rectification and/or completion with respect to the data controller if the personal data processed concerning you is incorrect or incomplete. 

3. The right to limitation of processing 

(1) Under the following conditions, you may request from the data controller that the processing of your personal data be restricted: 

- If you contest the accuracy of your personal data for a period that enables the data controller to verify the accuracy of the personal data; 

- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; 

- the data controller no longer needs the personal data for processing purposes, but they are required by you for the establishment, exercise or defence of legal claims or 

- you have objected to processing pursuant to Art. 21 Para. 1 GDPR pending the verification whether the legitimate grounds of the controller overrides your reasons. 

(2) Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State. If the processing restriction has been done in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted. 

4. Right to deletion 

(1) You can request that the data controller delete the personal data concerning you immediately, provided that one of the following reasons applies: 

- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed. 

- You withdraw your consent on which the processing is based according to Art. 6 Para. 1 lit. a) or Art. 9 para. 2 (a) GDPR, and where there is no other legal ground for its processing. 

- You object pursuant to Art. 21 Para. 1 of the GDPR, and there are no overriding legitimate grounds for processing, or you submit an objection to the processing pursuant to Art. 21 para. 2 GDPR to the processing; 

- The personal data concerning you have been unlawfully processed. 

- The personal data concerning you must be deleted for compliance with a legal obligation under Union or Member State law to which the data controller is subject. 

- The personal data concerning you has been collected in relation to services offered by information society services pursuant to Art. 8 para. 1 GDPR. 

(2) If the data controller has made personal data that concerns you public and is subject to the obligation to delete it pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data. 

(3) The right to deletion does not exist insofar as processing is necessary 

- to exercise the right of freedom of expression and information; 

- for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the person responsible is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the person responsible; 

- for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 (h) and (i), as well as Art. 9 para. 3, GDPR; 

- for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in clause (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or 

- to assert, exercise or defend legal claims; 

5. The right to information 

If you have exercised your right to have the data controller correct, delete, or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. It is your right to have the data controller inform you regarding such recipients. 

6. Right to data portability 

- You have the right to obtain your personal data that you have provided to the data controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data have been provided, insofar as a) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a) of the GDPR or Art. 9 para. 2 lit. a) of the GDPR or on a contract pursuant to Art. 6 para. 1 (b) GDPR and b) the processing is carried out using automated methods. 

- In exercising this right, you shall have the right to have the personal data transmitted directly from one data controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this. 

- The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller. 

- In order to exercise the right to data portability, the data subject may at any time contact the controller. 

7. Right of objection 

- You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 lit. e) or lit. f) of the GDPR; the same applies to profiling based on these provisions. 

- The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

- If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes. 

- In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications. 

- In order to exercise the right to object, the data subject may contact the controller directly. 

8. The right to revoke the declaration of consent pursuant to data protection 

You have the right at any time to revoke your data protection declaration of consent. The revocation of consent shall not affect the legality of any processing undertaken on the basis of this consent before its withdrawal. You can contact the data controller for this. 

9. Automated decision in individual cases, including profiling 

(1) You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision: 

- is necessary for entering into, or performance of, a contract between the you and a data controller; 

- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or 

- is based on your explicit consent. 

(2) However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 of the GDPR, unless Art. 9 para. 2 lit. a) or g) of the GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests. 

(3) In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state his or her own position and to challenge the decision. 

(4) If the data subject wishes to exercise their rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the company

10. The right to file a legal complaint with a supervisory authority 

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR. The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR..

23. Changes to the privacy policy 

We reserve the right to change our privacy practices and this policy to adapt it to changes in relevant laws and/or regulations or to better meet your needs. Possible changes to our data protection practices will be announced here. Please note the current version date of the privacy policy.