Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website, and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data refers to all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Thorsten Knickenberg
Gladbacher Str. 15
40219 Düsseldorf
Germany
Mobile: +49 176 64653547
Email: thorsten.knickenberg@rmu-support.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for displaying the website:
Website visited
Date and time of access
Amount of data transmitted (in bytes)
Source/reference from which you accessed the site
Browser used
Operating system used
IP address (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries). You can recognize an encrypted connection by the “https://” in your browser’s address bar and the lock symbol.
3) Hosting and Content Delivery Network
We use a provider to host our website and display its content, whose services are provided exclusively on servers located within the European Union, either directly or via selected subcontractors.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of visitors’ data and to prohibit unauthorized disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable certain functions, we use cookies. Cookies are small text files that are stored on your device. Some cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for a longer period and store page settings (“persistent cookies”). You can find the storage duration in your browser’s cookie settings.
If personal data is processed through individual cookies, this is done:
pursuant to Art. 6(1)(b) GDPR for contract performance,
pursuant to Art. 6(1)(a) GDPR based on your consent, or
pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in optimal website functionality and a user-friendly experience.
You can configure your browser to inform you about the use of cookies and decide individually whether to accept them, or to exclude cookies altogether.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
5.1 Microsoft Bookings
For online appointment scheduling, we use Microsoft Bookings, a service provided by:
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA
For scheduling appointments, first and last name and email address (and optionally a phone number) are collected pursuant to Art. 6(1)(b) GDPR and transmitted to the provider pursuant to Art. 6(1)(f) GDPR for efficient customer and appointment management.
Your data will be deleted by the provider after the appointment has taken place or after the scheduled time has expired.
We have concluded a data processing agreement with the provider.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
5.2 WhatsApp Business
Visitors may contact us via WhatsApp, operated by:
WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
We use the WhatsApp Business version.
If you contact us via WhatsApp in connection with a specific business transaction, we process your mobile phone number and name (if provided) pursuant to Art. 6(1)(b) GDPR. For general inquiries, data is processed pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in efficient communication.
Your data is used solely to respond to your inquiry and is not shared with third parties.
Please note that WhatsApp Business may access the address book of the device used and transmit stored phone numbers to servers of Meta Platforms Inc. in the USA. We ensure that only contact data of users who have contacted us via WhatsApp is stored.
Further information can be found in WhatsApp’s privacy policy.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
5.3 Contact Forms and Email
When contacting us (e.g. via contact form or email), personal data is collected as specified in the respective form. This data is used exclusively to process your request and for technical administration.
The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR if the contact relates to contract initiation. Data will be deleted after your request has been fully processed, provided no statutory retention obligations apply.
6) Comment Function
When using the comment function, your comment, the time of submission, your chosen username, your IP address, and your email address are stored and published. This is done for security reasons and to allow contact in case of legal objections.
Legal bases are Art. 6(1)(b) and (f) GDPR.
We reserve the right to delete comments that are deemed unlawful by third parties.
7) Use of Customer Data for Direct Advertising
Email newsletters to existing customers
If you provided your email address when purchasing goods or services, we may send you offers for similar products or services by email pursuant to §7(3) UWG and Art. 6(1)(f) GDPR.
You may object at any time. After your objection, your email address will no longer be used for advertising purposes.
8) Website Functionalities
8.1 LinkedIn Plugins
We use plugins from LinkedIn Ireland Unlimited Company.
Plugins are initially deactivated using a “two-click” solution. Data is only transmitted after you activate the plugin and consent pursuant to Art. 6(1)(a) GDPR.
Data may also be transferred to LinkedIn Inc., USA.
Standard contractual clauses are used to safeguard data transfers.
8.2 Google Maps
This website uses Google Maps provided by Google Ireland Limited.
When accessing pages with embedded maps, data such as your IP address is transmitted to Google servers, possibly including servers in the USA.
Processing is based on Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR if consent is required.
You may disable Google Maps by deactivating JavaScript in your browser.
Google participates in the EU-US Data Privacy Framework.
8.3 Google Customer Reviews
We participate in the “Google Customer Reviews” program. With your consent, your email address is transmitted to Google to request a review.
Data may be transferred to the USA.
Google participates in the EU-US Data Privacy Framework.
8.4 Microsoft Teams
For online meetings and webinars, we use Microsoft Teams.
Processed data may include account data, session data, audio, video, and chat content.
Legal bases include Art. 6(1)(b), (a), and (f) GDPR.
Microsoft participates in the EU-US Data Privacy Framework.
8.5 Job Applications by Email
Applicants may apply for open positions via email.
Application data is processed exclusively for recruitment purposes pursuant to Art. 6(1)(b) GDPR and §26 BDSG.
If no employment relationship is established, data will be deleted no later than six months after notification.
9) Rights of the Data Subject
You have the following rights under GDPR:
Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to notification (Art. 19)
Right to data portability (Art. 20)
Right to withdraw consent (Art. 7(3))
Right to lodge a complaint (Art. 77)
Right to Object
You may object to processing based on legitimate interests at any time for reasons arising from your particular situation.
If you object to processing for direct marketing purposes, processing for such purposes will cease immediately.
10) Storage Duration of Personal Data
Personal data is stored for as long as necessary based on the legal basis, purpose of processing, and statutory retention periods.
Data based on consent is stored until consent is withdrawn.
Contract-related data is deleted after statutory retention periods expire.
Data based on legitimate interests is deleted after objection, unless overriding legitimate grounds exist.
Otherwise, personal data is deleted once it is no longer required for its original purpose.