This is the privacy policy of RIMA Holding GmbH (hereinafter "us/we") (for contact details see Sec. 1) for the website https://rimalog.com/ (hereinafter "Website").
This policy is intended to inform "you" as a visitor to the Website - and if applicable also as our customer or applicant - about the type, scope and purpose of the collection, storage and use (hereinafter collectively referred to as "processing") of personal data when using the Website. "Personal data" is all data that can be related to you personally, e.g. name, address, telephone number, e-mail address, date/place of birth, gender, user behavior (online) (hereinafter collectively referred to as "data"). The protection of your privacy is very important to us. All data will be collected, stored and used by us in accordance with the statutory provisions and will not be passed on to third parties without your consent.
For applicants: the provision of personal data is neither required by law nor by contract; you are not obliged to provide personal data. However, the provision of personal data is necessary for the implementation of the application procedure. This means that if you do not provide us with any personal data in an application, we will not be able to carry out the application procedure. There is no automated decision in individual cases in the sense of Art. 22 of the EU General Data Protection Regulation ("GDPR"), i.e. the decision on your application is not based exclusively on automated processing.
1. Who is responsible for my data processing and who can I contact?
"Responsible" according to Art. 4 para. 7 of the GDPR is:
RIMA Holding GmbH
Turmstrasse 18
CH-6312 Steinhausen
Switzerland
E-mail: contact@rimalog.com
2. Which data is processed?
When you contact us by e-mail, the data you provide (your e-mail address and your name) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer required or restrict processing if there are legal obligations to retain data.
If we intend to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. In this context, we will also list the defined criteria of storage duration.
2.1 Collection and storage of data provided to us:
We also collect and store the following data when you communicate them to us (e.g. by e-mail or via our contact form):
- Your contact details (name, address, telephone number, e-mail address, gender),
- For applicants:
- Applications with personal data: Name, address, date of birth, contact data, qualification data,
- (work) certificates with address data, performance data, assessment data etc.,
- Certificates with address data, performance data and assessment data,
- Publicly accessible, job-related data, such as a profile on professional social media networks.
2.2 Collection and storage of data when visiting the Website:
When you call up the Website, information is automatically sent to the server of the Website by the browser used on your end device (hereinafter "computer"). This information is temporarily stored in a so-called "log file". The following information is collected without any further action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access takes place (referrer URL),
- Browser used and the operating system of your computer as well as the name of your access provider.
3. For what purpose are the data processed?
We process the above-mentioned data for the following purposes:
- To contact you
- For applicants: To process your application
- Billing
- Transmission of information you request from us
- To guarantee a smooth connection to the Website,
- To guarantee a comfortable use of the Website,
- To evaluate system security and stability,
- For other administrative purposes.
The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f) GPDR. Our legitimate interest follows from the above listed purposes for data collection.
For applicants: Personal data of applicants may be processed for the purposes of the application procedure if this is necessary for the decision on whether to establish an employment relationship with us.
In the event of an employment relationship between you and us, we may, in accordance with Sec. 26 (1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for exercising or fulfilling the rights and duties of employee representation arising from a law or a labor agreement, or a works or service agreement (collective agreement).
Where the processing of personal data of applicants is based on consent, the assessment of the voluntary nature of the consent shall take into account in particular the dependence of the applicants in the application process and the circumstances in which the consent has been given. The provision of personal data shall be deemed voluntary if a legal or economic advantage is achieved for the applicants or if employers and applicants pursue similar interests. If you have given us your consent to the collection, processing or transmission of certain personal data, then this consent forms the legal basis for the processing of this data.
You can give us the following consent as part of the application procedure:
- Storage of the application documents beyond the current application procedure for consideration in later application procedures.
You can revoke your declaration of consent at any time. A revocation does not affect the lawfulness of the processing carried out up to the revocation declaration.
If you are a customer, we will use your e-mail address for our own marketing measures, such as sending newsletters by e-mail, if you have permitted us to do so. You can unsubscribe from receiving these newsletters at any time free of charge. When you register for the newsletter, which you must confirm by means of the so-called "double opt-in" procedure, your first name, last name and e-mail address are used with your consent for our own advertising purposes, i.e. such newsletters are sent to you solely by us. The consent to receive a newsletter can be revoked at any time by e-mail. In every newsletter you will also find a link with which you can withdraw your consent. You can also unsubscribe from receiving the newsletter at any time by post, e-mail or telephone. For this purpose, please use the contact details given in Sec. 1.
4. How secure is your data? How is your data stored?
4.1 Data security:
When you visit the Website, we use the common SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of the Website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures, see Sec. 4.2, to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
4.2 Data storage:
Your data is partly stored in physical files (paper) and kept securely in corresponding file folders, but it is also stored and secured electronically and is double encrypted using a combined encryption process based on asymmetric RSA and symmetric AES-256 encryption.
Access to our computer system is only granted after personal authentication by authorized persons. Our rooms are secured by an appropriate locking system to the customary extent. Our employees and such service providers who have access to your data are bound to secrecy in writing as required by the GPDR.
We operate a double encrypted data backup on several data carriers, one of which is not stored near the computer system. This also ensures data recovery after fire or water damage.
5. Who gets your data?
Your data is provided to:
RIMA Holding GmbH
Turmstrasse18
CH-6312 Steinhausen
Switzerland
E-mail: contact@rimalog.com
and to its employees who are required by data protection laws to maintain confidentiality. If you have any further questions about the individual recipients of your data, please contact us by e-mail at: contact@rimalog.com.
Your personal data will not be transferred to third parties for purposes other than those listed below, i.e. we will only pass on your personal data to third parties if
- you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GPDR,
- disclosure is required under Art. 6 Para. 1 S. 1 lit. f) GPDR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- there is a legal obligation for disclosure under Art. 6 para. 1 sentence 1 lit. c) GPDR, or
- this is legally permissible and, according to Art. 6 Para. 1 S. 1 lit. b) GPDR, required for the processing of contractual relationships with you.
We only pass on your data to the third parties listed below, unless we are legally obliged to pass on your data in any other way:
- Our lawyers, tax consultants and accounting offices.
6. Transfer of data to a third country
Your data will be transferred to Switzerland (headquarters of RIMA Holding GmbH). A transfer of your data to another third country is not intended.
7. How long is your data stored?
We store your data as long as required by legal obligations.
Data resulting from your position as a customer will be stored for 10 years. Invoices are also kept for 10 years in accordance with current tax law. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted.
For applicants: We will store your personal data for as long as is necessary to decide on your application. Your data is regularly deleted within 6 months from the beginning of the applicant selection process. As far as an employment relationship between you and us does not come about, we can also continue to store data if you have consented to further storage or if this is necessary to defend against possible legal claims.
8. Which data protection and revocation rights do you have?
8.1 You as the "data subject" have the following data protection rights:
- In accordance with Art. 15 GPDR, to request information about your data processed by us. In particular, you may request information as to the purposes of the processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of objection, the origin of your data, if not collected by us, and the existence of automated decision making including profiling and, where applicable, meaningful information on the details thereof;
- In accordance with Art. 16 GPDR, to immediately demand the correction of incorrect or incomplete data stored by us;
- In accordance with Art. 17 GPDR, to demand the deletion of your data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- In accordance with Art. 18 GPDR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GPDR;
- In accordance with Art. 20 GPDR, to receive your data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
- In accordance with Art. 7 Para. 3 GPDR, to revoke your once given consent at any time. As a consequence, we may not continue the data processing based on this consent in the future; and
- In accordance with Art. 77 GPDR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our registered office mentioned in Sec. 1.
8.2 You as the "data subject" have the following right of objection:
If your data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GPDR, you have the right to object to the processing of your personal data in accordance with Art. 21 GPDR, if there are reasons arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without you having to state a particular situation.
If you wish to exercise your right of revocation or objection, an e-mail to contact@rimalog.com is sufficient