CONTROLLER AND SCOPE
The controller as referred to in the EU General Data Protection Regulation (GDPR) and other, national data protection laws of the member states as well as other regulations on data protection is
RSU Rating Service Unit GmbH & Co. KG
You can reach our data protection officer by e-mail at Datenschutzbeauftragter@rsu-rating.de, by regular mail by adding “der Datenschutzbeauftragte” to our postal address or by telephone at +49/89/442340-0.
The present text is to inform users about the nature, extent, and purpose of the collection and use of personal data by RSU Rating Service Unit GmbH & Co. KG, Karlstraße 35, 80333 München, on this website https://www.rsu-rating.de. The relevant statutory provisions on data protection are contained in the GDPR.
We would like to assure you that we take data protection and data security very seriously, which is why we inform you below about the specific personal data that are collected from you and about the purpose for which they are collected.
TREATMENT OF PERSONAL DATA
“Personal data” as defined in Article 4 of the GDPR means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or to one or more factors. For example, personal data include the name, e-mail address, telephone number or IP address of an individual.
RSU only collects, uses or discloses personal data if this is legally permitted or if the user has agreed to the collection of the data.
Information which we cannot connect to you (or which we could only connect to you at disproportionate cost), for example because it has been anonymized, is not personal data. Any processed personal data will be deleted once the purpose of the processing has been achieved and there is no legal requirement to store the data any more.
If we process your personal data for specific services, the concrete operations, extent and purpose of and legal basis for the processing and the time for which the data are stored are stated below.
ACCESS DATA/SERVER LOG FILES
RSU (or its web space provider) collects data on every instance in which the website is accessed (referred to as server log files). The data collected include: name of website retrieved, file, date and time of the retrieval, amount of data transmitted, information on success of retrieval, type and version of browser, user’s operating system, referrer URL (site previously vis-ited), IP address, and requesting provider.
RSU only uses the log data for statistical evaluation in support of the operation, protection, and optimisation of the website. However, RSU reserves the right to check the log files at a later time if there are specific indications of illegal use.
This processing is based on Article 6(1)(f) of the GDPR. Processing these data is necessary for maintaining a website and thus for pursuing legitimate interests of our company.
The data are deleted as soon as they are no longer needed for displaying the website. Recording the data required for operating the website and saving the data in log files is indispensable for operating an Internet page. For this reason, users cannot object to these actions. Data may be stored for a longer time in individual cases if this is required by law.
If RSU is contacted by e-mail, user information is stored for the processing of the inquiry and in case further questions arise.
Your e-mail address is used to assign your message to its sender and to answer you. Your personal data will not be disclosed to third parties. The personal data recorded in this process will be deleted once they are no longer needed or their processing will be restricted if we are required by law to store them.
INCORPORATION OF THIRD-PARTY CONTENT AND SERVICES
Third-party content such as maps from Google Maps, RSS feeds or charts from other websites may be incorporated into this website. This always requires the providers of such content (referred to as “third-party providers” below) to know the IP addresses of the users to be able to send the content to the users’ browsers. The IP address is therefore necessary for presenting the content. While we try to incorporate only content whose providers use IP addresses only for transmitting the content, we have no way of preventing third-party providers from storing IP addresses, for example for statistical purposes. If we learn that third-party providers store IP addresses, we inform users accordingly.
However, if IP anonymization is enabled for this website, the users’ IP addresses are shortened by Google for addresses from within the countries of the European Union or from other countries adhering to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address sent to a Google server in the USA and shortened there. IP anonymization is enabled for this website. Google has been tasked by the company operating this website with using the information gathered to analyse how the website is used by users, compiling reports on the activities occurring on the website and providing further services relating to the use of the website and of the Internet. We have a legitimate interest in processing data for these purposes. The legal basis for using Google Analytics is section 15, sub-section 3 (§ 15 Abs. 3) of the German Telemediengesetz (TMG) and Article 6(1)(f) of the GDPR. The data sent by us, which are linked to cookies, user identifiers (e.g. user IDs) or advertising IDs are automatically deleted after 14 months. Data whose maximum storage time has been reached are automatically deleted once a month.
The IP address transmitted by the user’s browser for the purposes of Google Analytics will not be merged with other Google data. Users can avoid the storage of cookies by choosing the appropriate settings in their browsers; however, in that case the complete functionality of the website may not be available. Users can also prevent the retrieval of the data on their use of the website generated by a cookie (including their IP addresses) and the processing of these data by Google if they download and install the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de.
For further information on how Google uses data for advertising purposes as well as options regarding settings and possible objections, users should refer to the following websites: https://www.google.com/intl/de/policies/privacy/partners/ (“How Google uses data when you use our partners’ sites or apps”), https://www.google.com/policies/technologies/ads (“Advertising“), https://www.google.de/settings/ads (“Control the information Google uses to show you ads”) and https://www.google.com/ads/preferences/ (“Determine what ads Google can show you”).
As an alternative to the browser add-on or if using browsers on mobile devices, you can prevent the collection of data through Google Analytics on this website by clicking on the following link. This will cause an Opt-Out Cookie to be saved to your device. If you have deleted the cookies on your device, you need to click on the link again:
RIGHTS OF THE DATA SUBJECT
Users have the following rights with regard to the personal data concerning them:
a) right of access to personal data stored
b) right to rectification
c) right to blocking and erasure unless this conflicts with any statutory storage requirements
d) right to restriction of processing
e) right to object to the processing
f) right to data portability
In addition, users have the right to lodge a complaint with a supervisory authority about our processing of their personal data.